Alternatives and similar repositories for nightHawkResponse

Users that are interested in nightHawkResponse are comparing it to the libraries listed below

• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,162Updated 7 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆507Updated 2 years ago
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆717Updated 2 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆415Updated 2 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• sensepost / DET
  (extensible) Data Exfiltration Toolkit (DET)
  ☆828Updated 7 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆381Updated 7 months ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆467Updated 6 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆563Updated 7 years ago
• SekoiaLab / Fastir_Collector
  ☆509Updated 4 years ago
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆900Updated 2 months ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆904Updated 5 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆384Updated 6 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆748Updated 6 months ago
• GoSecure / malboxes
  Builds malware analysis Windows VMs so that you don't have to.
  ☆1,043Updated 3 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆547Updated 2 years ago
• uber-common / metta
  An information security preparedness tool to do adversarial simulation.
  ☆1,124Updated 6 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆499Updated 2 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆526Updated last year
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆619Updated 5 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆486Updated 7 years ago
• AlienVault-OTX / ApiV2
  Version 2 of the ThreatCrowd API
  ☆271Updated 2 years ago
• Ptr32Void / OSTrICa
  ☆306Updated 8 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆414Updated 2 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 4 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆279Updated last year
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆945Updated 4 years ago