Alternatives and similar repositories for nightHawkResponse

Users that are interested in nightHawkResponse are comparing it to the libraries listed below

• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆255Updated 7 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆416Updated 3 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,163Updated 7 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆749Updated 10 months ago
• SekoiaLab / Fastir_Collector
  ☆519Updated 4 years ago
• omriher / CapTipper
  Malicious HTTP traffic explorer
  ☆723Updated 2 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆506Updated 3 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆468Updated 6 years ago
• krmaxwell / maltrieve
  A tool to retrieve malware directly from the source for security researchers.
  ☆563Updated 8 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆658Updated 6 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆548Updated 2 years ago
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆622Updated 6 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆388Updated 3 months ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆905Updated 6 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆496Updated 2 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆389Updated 6 years ago
• Ptr32Void / OSTrICa
  ☆306Updated 8 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 7 years ago
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆473Updated last year
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆488Updated 8 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆416Updated 2 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆281Updated 2 years ago
• secrary / SSMA
  SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]
  ☆411Updated 5 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆251Updated last year
• RedSiege / Just-Metadata
  Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within …
  ☆628Updated last year
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆944Updated 4 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆535Updated last year
• sensepost / DET
  (extensible) Data Exfiltration Toolkit (DET)
  ☆828Updated 8 years ago