Alternatives and similar repositories for sguil

Users that are interested in sguil are comparing it to the libraries listed below

• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆248Updated 7 months ago
• BinaryDefense / auto-ossec
  ☆141Updated last year
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆293Updated 3 years ago
• theflakes / Ultimate-Forensics-VM
  Evolving directions on building the best Open Source Forensics VM
  ☆160Updated 6 years ago
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆353Updated last year
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆154Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆243Updated last year
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆435Updated 3 years ago
• Cisco-Talos / file2pcap
  ☆172Updated 3 years ago
• zeek / packages
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆137Updated this week
• Cisco-Talos / Daemonlogger
  The Official Github Repository of Daemonlogger
  ☆22Updated 4 years ago
• ossec / ossec-docs
  OSSEC Documentation
  ☆138Updated 5 months ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 4 years ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆200Updated 3 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆454Updated last year
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• conix-security / audit-springbok
  A tool for analyzing firewall rules
  ☆156Updated 7 years ago
• da667 / Autosnort
  Repo for autosnort scripts.
  ☆158Updated 4 years ago
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆175Updated 4 years ago
• mandiant / ioc_writer
  ☆203Updated 2 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆210Updated 7 years ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆94Updated 3 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆124Updated 9 years ago