Alternatives and similar repositories for nightHawkResponse

Users that are interested in nightHawkResponse are comparing it to the libraries listed below

• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆255Updated 6 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆505Updated 3 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆416Updated 2 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆750Updated 9 months ago
• SekoiaLab / Fastir_Collector
  ☆519Updated 4 years ago
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆722Updated 2 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆469Updated 6 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆548Updated 2 years ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆906Updated 6 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆563Updated 8 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆413Updated 2 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆621Updated 5 years ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,164Updated 7 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆533Updated last year
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆658Updated 6 years ago
• sensepost / DET
  (extensible) Data Exfiltration Toolkit (DET)
  ☆827Updated 7 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆389Updated 6 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆386Updated 2 months ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆947Updated 4 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆495Updated 2 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 7 years ago
• secrary / SSMA
  SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]
  ☆410Updated 5 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆488Updated 8 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆281Updated 2 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆251Updated 11 months ago
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆910Updated 2 weeks ago