Alternatives and similar repositories for honeyports

Users that are interested in honeyports are comparing it to the libraries listed below

• activecm / devprof
  Device profile: Define acceptable amounts of traffic for your devices and see a report of outliers.
  ☆16Updated 5 years ago
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆80Updated last month
• activecm / sniffer-template
  Template for building a packet sniffer
  ☆14Updated last year
• pan-unit42 / wireshark-tutorial-Dridex-traffic
  pcaps for Wireshark tutorial about examining Dridex infection traffic
  ☆17Updated 5 years ago
• adhdproject / awesome-active-defense
  an awesome list of active defense resources
  ☆126Updated 5 years ago
• Security-Onion-Solutions / securityonion-soc
  ☆60Updated this week
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆76Updated 5 years ago
• Resistor52 / terraform-cloud-workstation
  Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation
  ☆26Updated last year
• mayhemiclabs / weblabyrinth
  A system that creates a bogus web structure to entrap and delay web scanners
  ☆65Updated 4 years ago
• 0x4D31 / honeybits-win
  Windows version of honeybits - a PoC tool to create breadcrumbs and honeytokens, to lead the attackers to your honeypots!
  ☆25Updated 8 years ago
• cisagov / kali-packer
  This project can be used to create AMIs based on Kali Linux, a penetration testing distribution.
  ☆21Updated last month
• cisagov / pe-reports
  Automated process to build and distribute Posture & Exposure Reports' bi-weekly to customers.
  ☆17Updated 4 months ago
• CrowdStrike / falcon-integration-gateway
  Falcon Integration Gateway (FIG)
  ☆21Updated 2 weeks ago
• Shuffle / shuffle-docs
  Documentation used for Shuffle
  ☆21Updated this week
• Shuffle / workflows
  Workflows for Shuffle
  ☆24Updated 3 years ago
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 4 years ago
• mitre / training
  A CALDERA plugin
  ☆26Updated last week
• activecm / passer
  Passive service locator, a python sniffer that identifies servers, clients, names and much more
  ☆256Updated 2 years ago
• sansinstitute / slingshot
  SANS Slingshot Linux Distribution
  ☆55Updated 5 years ago
• corelight / threat-hunting-guide
  ☆55Updated 3 years ago
• center-for-threat-informed-defense / caldera_pathfinder
  Pathfinder is a plugin for mapping network vulnerabilities, scanned by CALDERA or imported by a supported network scanner, and translatin…
  ☆126Updated 7 months ago
• tenable / atomic-red-team
  Small and highly portable detection tests based on MITRE's ATT&CK.
  ☆10Updated 9 months ago
• SecurityNik / pktIntel
  Tool used to perform threat intelligence against packet data
  ☆36Updated 9 months ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• mandiant / thiri-notebook
  The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat huntin…
  ☆154Updated 3 years ago
• adhdproject / spidertrap
  Traps web spiders
  ☆76Updated 5 years ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• clairmont32 / VirusTotal-Tools
  Submits multiple domains to VirusTotal API
  ☆59Updated 4 years ago
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆59Updated 3 years ago
• mitre / engage
  MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
  ☆67Updated last year