Alternatives and similar repositories for nightHawkResponse

Users that are interested in nightHawkResponse are comparing it to the libraries listed below

• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆257Updated 7 years ago
• SekoiaLab / Fastir_Collector
  ☆518Updated 5 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆416Updated 3 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆564Updated 8 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆434Updated 2 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆510Updated 3 years ago
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆724Updated 2 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆472Updated 7 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 8 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆749Updated last year
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆624Updated 6 years ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,165Updated 8 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆552Updated 2 years ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆909Updated 6 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆388Updated 3 weeks ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆391Updated 6 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆538Updated last year
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆497Updated 3 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆662Updated 6 years ago
• secrary / SSMA
  SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]
  ☆410Updated 5 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆396Updated 3 years ago
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆473Updated last year
• diogo-fernan / malsub
  A Python RESTful API framework for online malware analysis and threat intelligence services.
  ☆369Updated last year
• Ptr32Void / OSTrICa
  ☆305Updated 8 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆253Updated last year
• sensepost / DET
  (extensible) Data Exfiltration Toolkit (DET)
  ☆829Updated 8 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆282Updated 2 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆491Updated 8 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆415Updated 3 years ago