Alternatives and similar repositories for pcap-stats

Users that are interested in pcap-stats are comparing it to the libraries listed below

• weslambert / securityonion-misp
  ☆37Updated 4 years ago
• SigmaHQ / pySigma-backend-splunk
  pySigma Splunk backend
  ☆41Updated 2 weeks ago
• corelight / raspi-corelight
  Corelight@Home script
  ☆46Updated 2 years ago
• clausing / scripts
  ☆79Updated 3 weeks ago
• corelight / threat-hunting-guide
  ☆56Updated 3 years ago
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆75Updated last year
• OTRF / infosec-jupyterthon
  A community event for security researchers to share their favorite notebooks
  ☆109Updated last year
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆79Updated 4 years ago
• flowintel / flowintel
  An open source platform to support analysts to organise their case and tasks
  ☆114Updated last week
• MarkBaggett / apiify
  Wrap any binary into a cached webserver
  ☆56Updated 3 years ago
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆80Updated 2 months ago
• correlatedsecurity / SPEED-SIEM-Use-Case-Framework
  Repository for SPEED SIEM Use Case Framework
  ☆56Updated 5 years ago
• activecm / sniffer-template
  Template for building a packet sniffer
  ☆15Updated last year
• csirtgadgets / cif-v5
  The FASTEST way to consume threat intel.
  ☆69Updated 2 years ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆40Updated 3 years ago
• SecurityNik / pktIntel
  Tool used to perform threat intelligence against packet data
  ☆36Updated 10 months ago
• Maboalenen / DFIR
  Incident response teams usually working on the offline data, collecting the evidence, then analyze the data
  ☆45Updated 3 years ago
• activecm / docker-zeek
  Run zeek with zeekctl in docker
  ☆59Updated last year
• dfir-dd / incident-response-playbooks
  Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
  ☆49Updated last year
• CERT-Bund / IRNetTools
  Incident Response Network Tools
  ☆24Updated 4 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆76Updated 5 years ago
• cudeso / CSIRT-Jump-Bag
  CSIRT Jump Bag
  ☆26Updated last year
• splunk / salo
  Synthetic Adversarial Log Objects: A Framework for synthentic log generation
  ☆85Updated last year
• splunk / attack-detections-collector
  Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique
  ☆69Updated last year
• neolea / neolea-training-materials
  Open source training materials for law-enforcement and organisations interested in DFIR.
  ☆62Updated 6 months ago
• aboutsecurity / jupyter-notebooks
  My Jupyter Notebooks
  ☆36Updated 9 months ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆74Updated 3 years ago
• cerebrate-project / cerebrate
  Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…
  ☆91Updated last month
• chrissanders / idh
  Intrusion Detection Honeypots Book Code
  ☆26Updated 5 years ago
• eCrimeLabs / MISP-PurgeEvents
  Cleanup of older MISP events can require some work until now
  ☆27Updated 3 months ago