Alternatives and similar repositories for neo

Users that are interested in neo are comparing it to the libraries listed below

• b3b0 / snipehunt
  🦉🔬A small PowerShell tool for finding information quickly on malicious IPs or FQDNs. Powershell threat hunting.
  ☆11Updated 5 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆42Updated 2 years ago
• Invoke-IR / PowerForensicsPortable
  ☆32Updated 8 months ago
• adulau / misp-osint-collection
  Collection of best practices to add OSINT into MISP and/or MISP communities
  ☆66Updated last year
• Fallenour / Venator
  Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…
  ☆21Updated 8 years ago
• grayfold3d / POSH-Triage
  Tools for parsing Forensic images
  ☆41Updated 6 years ago
• blackhatethicalhacking / urh
  Universal Radio Hacker: investigate wireless protocols like a boss 📡😎
  ☆17Updated 5 years ago
• WiredPulse / AutomatedProfiler
  Automated forensics written in PowerShell
  ☆34Updated 5 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆40Updated 8 years ago
• ion-storm / emotet-malware-killer
  ☆39Updated 5 years ago
• CIRCL / traceroute-circl
  Traceroute improved wrapper for CSIRT and CERT operators
  ☆38Updated 10 months ago
• secgroundzero / ossem_modular
  OSSEM Modular
  ☆27Updated 5 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 6 years ago
• weslambert / securityonion-strelka
  ☆13Updated 5 years ago
• paranoidninja / Threat-Hunting
  This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…
  ☆56Updated 7 years ago
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 4 years ago
• dhoelzer / Silky
  Web interface for monitoring and interacting with Netflow data stored in Silk repositories.
  ☆13Updated 6 years ago
• dhoelzer / DAD
  Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.
  ☆23Updated 8 years ago
• yeti-platform / pyeti
  Python bindings for Yeti's API
  ☆18Updated last year
• mandiant / DFUR-Splunk-App
  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
  ☆12Updated 4 years ago
• nogoodconfig / pyarascanner
  A simple many-rules to many-files YARA scanner for incident response or malware zoos.
  ☆26Updated 7 years ago
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆29Updated 7 years ago
• codingo / Ransomware-Json-Dataset
  Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ran…
  ☆73Updated 2 years ago
• thirdeyeintelligence / Memoirs-of-a-Threat-Hunter
  My personal experience in Threat Hunting and knowledge gained so far.
  ☆19Updated 8 years ago
• swimlane / PSAttck
  PSAttck is a light-weight framework for the MITRE ATT&CK Framework.
  ☆38Updated 3 years ago
• Cyb3rWard0g / CyberWardogLab
  A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…
  ☆55Updated 7 years ago
• 0x4D31 / honeyku
  A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
  ☆64Updated 6 years ago
• redcanaryco / cb-response-smb1-utility
  A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.
  ☆15Updated 6 years ago
• keydet89 / IWSBook
  Site for IWS book content
  ☆18Updated 6 years ago