Alternatives and similar repositories for ThreatFox

Users that are interested in ThreatFox are comparing it to the libraries listed below

• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆157Updated 8 months ago
• BushidoUK / Exploring-APT-campaigns
  Further investigation in to APT campaigns disclosed by private security firms and security agencies
  ☆87Updated 3 years ago
• alex-cart / LEAF
  Linux Evidence Acquisition Framework
  ☆117Updated last year
• BushidoUK / Abused-Legitimate-Services
  Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
  ☆60Updated 3 years ago
• Sh1n0g1 / z9
  PowerShell Script Analyzer
  ☆70Updated 2 years ago
• pr0xylife / Emotet
  IOC Collection 2022
  ☆57Updated 2 years ago
• curated-intel / Initial-Access-Broker-Landscape
  A visualized overview of the Initial Access Broker (IAB) cybercrime landscape
  ☆116Updated 4 years ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated 2 years ago
• svdwi / BlueBox
  BlueBox Malware analysis Box and Cyber threat intelligence.
  ☆46Updated 3 years ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆56Updated 2 years ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆105Updated 3 years ago
• huebicode / abuselookup-gui
  A GUI to query the API of abuse.ch.
  ☆70Updated 3 years ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆123Updated last year
• MazX0p / ThreatHound
  ☆160Updated 2 years ago
• CronUp / Malware-IOCs
  ☆96Updated 8 months ago
• harelsegev / prefetch-hash-cracker
  A small util to brute-force prefetch hashes
  ☆77Updated 3 years ago
• splunk / melting-cobalt
  A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
  ☆168Updated 3 years ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated last year
• curated-intel / MOVEit-Transfer
  A repository for tracking events related to the MOVEit Transfer Cl0p Campaign
  ☆71Updated 2 years ago
• Neo23x0 / god-mode-rules
  God Mode Detection Rules
  ☆135Updated last year
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆126Updated last year
• pr0xylife / Pikabot
  ☆32Updated last year
• Abjuri5t / SarlackLab
  ☆34Updated 2 months ago
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆66Updated 3 years ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆105Updated last year
• ThreatMon / ThreatMon-Reports-IOC
  ☆52Updated 5 months ago
• tropChaud / webpage2attack
  Generate portable TTP intelligence from a web-based report
  ☆31Updated 3 years ago
• ThreatLabz / iocs
  This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
  ☆78Updated this week
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆73Updated last year