Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
☆84Jun 25, 2026Updated 4 months ago
Alternatives and similar repositories for espy
Users that are interested in espy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆303Mar 19, 2026Updated 7 months ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆267Feb 9, 2026Updated 8 months ago
- Extracts fields from zeek logs, compatible with zeek-cut☆28Jul 10, 2024Updated 2 years ago
- Tools for simulating threats☆205Oct 27, 2023Updated 3 years ago
- a port made of honey for blocking people☆13Jun 24, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Passive OS detection based on SYN packets without Transmitting any Data☆52Mar 29, 2023Updated 3 years ago
- The PoLRBear Project☆33Mar 12, 2021Updated 5 years ago
- Template for building a packet sniffer☆15Mar 25, 2024Updated 2 years ago
- ☆37Dec 17, 2020Updated 5 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,512Jan 12, 2026Updated 9 months ago
- Collection of walkthroughs on various threat hunting techniques☆78Aug 3, 2020Updated 6 years ago
- Credential and Red Teaming Defense for Windows Environments☆330Jul 17, 2024Updated 2 years ago
- Valkyrie Framework is an open source suite of tools that enable hunt teams to locate and identify hidden cybersecurity threats lurking in…☆12Sep 24, 2025Updated last year
- Test files of multiple types that can be used to deliver executable payloads.☆21Apr 30, 2026Updated 5 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science☆156Oct 1, 2026Updated 3 weeks ago
- ☆17Mar 24, 2026Updated 7 months ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆667Updated this week
- an awesome list of active defense resources☆129Jul 11, 2020Updated 6 years ago
- ☆231Nov 9, 2023Updated 2 years ago
- Tools by cooey comrades for cooey comrades.☆16Feb 23, 2023Updated 3 years ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆216Jul 21, 2022Updated 4 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Jul 5, 2020Updated 6 years ago
- Device profile: Define acceptable amounts of traffic for your devices and see a report of outliers.☆16Jan 28, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Tool used to perform threat intelligence against packet data☆37Oct 16, 2026Updated 2 weeks ago
- A PoC backdoor that uses Gmail as a C&C server☆13Jun 28, 2020Updated 6 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆24Aug 21, 2019Updated 7 years ago
- ☆2,442Oct 14, 2023Updated 3 years ago
- ☆53Jun 1, 2025Updated last year
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆116Sep 14, 2022Updated 4 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆229May 1, 2021Updated 5 years ago
- ☆13Oct 7, 2019Updated 7 years ago
- Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.☆489Nov 21, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Packet captures of malicious traffic for analysis using Wireshark☆67Jul 10, 2023Updated 3 years ago
- The CAPTCHA-resilient contact scraper.☆68Nov 18, 2025Updated 11 months ago
- ☆16May 13, 2021Updated 5 years ago
- THOR APT Scanner User Manual☆24Updated this week
- This repository is created to add value to existing Network Security Monitoring solutions.☆42Sep 20, 2016Updated 10 years ago
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago