Alternatives and similar repositories for analytics_toolkit

Users that are interested in analytics_toolkit are comparing it to the libraries listed below

• EmersonElectricCo / fsf
  File Scanning Framework
  ☆293Updated 4 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• daveherrald / botsv1
  Splunk Boss of the SOC v1 data set.
  ☆111Updated 7 years ago
• apger / SA-RBA
  Risk Based Alerting Supporting Add-On (SA) for Splunk
  ☆45Updated 3 years ago
• anthonygtellez / splunk_deployment_automation
  ☆22Updated 3 years ago
• PaloAltoNetworks / ioc-parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆73Updated last year
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆247Updated 4 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago
• target / huntlib
  A Python library to help with some common threat hunting data analysis operations
  ☆143Updated 2 years ago
• hire-vladimir / SA-cim_vladiator
  Data validator agains Splunk Common Information Model (CIM)
  ☆76Updated last year
• MISP / MISP-Taxii-Server
  An OpenTAXII Configuration for MISP
  ☆83Updated 2 years ago
• phantomcyber / phantom-apps
  Phantom Apps Repo
  ☆83Updated 3 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 5 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆340Updated 3 years ago
• HASecuritySolutions / Presentations
  ☆133Updated last year
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated 2 years ago
• mitre / cascade-server
  CASCADE Server
  ☆272Updated 2 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆251Updated 10 months ago
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆91Updated 7 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 6 years ago
• MISP / misp-taxonomies
  Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
  ☆282Updated last week
• splunk / SA-ctf_scoreboard
  ☆122Updated 3 years ago
• opendxl / opendxl-client-python
  OpenDXL Python Client
  ☆94Updated 7 months ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆413Updated 2 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 7 years ago
• egaus / MaliciousMacroBot
  ☆152Updated 6 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆179Updated 6 years ago
• STIXProject / stix-viz
  STIX Visualization Tool
  ☆109Updated 7 years ago