Alternatives and similar repositories for nightHawkResponse

Users that are interested in nightHawkResponse are comparing it to the libraries listed below

• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• SekoiaLab / Fastir_Collector
  ☆512Updated 4 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆416Updated 2 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆469Updated 6 years ago
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆718Updated 2 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆507Updated 3 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆563Updated 8 years ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,162Updated 7 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆548Updated 2 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆619Updated 5 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆384Updated 6 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆748Updated 7 months ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆904Updated 6 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆383Updated 2 weeks ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆487Updated 8 years ago
• sensepost / DET
  (extensible) Data Exfiltration Toolkit (DET)
  ☆829Updated 7 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆659Updated 6 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆494Updated 2 years ago
• certsocietegenerale / fame
  FAME Automates Malware Evaluation
  ☆906Updated 3 months ago
• Ptr32Void / OSTrICa
  ☆306Updated 8 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆413Updated 2 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆267Updated 4 years ago
• AlienVault-OTX / ApiV2
  Version 2 of the ThreatCrowd API
  ☆272Updated 2 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆249Updated 9 months ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆527Updated last year
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆468Updated last year