Alternatives and similar repositories for frankenstack

Users that are interested in frankenstack are comparing it to the libraries listed below

• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated 2 years ago
• certtools / contactdb
  The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams
  ☆37Updated 3 years ago
• cert-ee / s4a
  S4A main repository. SaltStack states, install script and build scripts
  ☆27Updated this week
• theparanoids / rdfp
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆40Updated 2 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆53Updated last month
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 2 years ago
• DearBytes / Opensource-Endpoint-Monitoring
  This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.
  ☆35Updated 6 years ago
• socprime / SigmaRulesIntegration
  ☆15Updated 7 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Updated 2 years ago
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆27Updated 5 years ago
• ccdcoe / Frankencoding
  You're busted!
  ☆27Updated 6 years ago
• tenzir / zeek-tenzir
  Enables Zeek to communicate with Tenzir
  ☆11Updated 2 years ago
• DCSO / balboa
  server for indexing and querying passive DNS observations
  ☆49Updated last month
• airbus-cert / Splunk-ETW
  A Splunk Technology Add-on to forward filtered ETW events.
  ☆30Updated 5 years ago
• CyCat-project / cycat-taxonomy
  CyCAT.org taxonomies
  ☆15Updated 4 years ago
• treyka / threaty_threatego
  Maltego entity pack encompassing the entire STIX 1.2 data model and a targeted subset of the CybOX 2.1 data model
  ☆11Updated 9 years ago
• caschnee / misp-use-cases
  ☆14Updated 7 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 5 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• automayt / FlowPlotter
  Generates visualizations from the output of flow tools such as SiLK.
  ☆35Updated 9 years ago
• jordisk / TheHive2Sigma
  Python script to automatically create sigma rules from The hive observables
  ☆25Updated 6 years ago
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆29Updated 2 years ago
• MISP / PyMISPWarningLists
  Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists
  ☆35Updated this week
• corelight / zerologon
  Zeek package to detect Zerologon
  ☆11Updated 4 years ago
• stricaud / sightingdb
  SightingDB is a database for Sightings
  ☆22Updated 2 years ago
• ncsa / bro-doctor
  ☆24Updated 5 years ago
• corelight / detect-ransomware-filenames
  ☆18Updated last year
• defensivedepth / Pertinax
  Integrating Sysinternals Autoruns’ logs into Security Onion
  ☆31Updated last year
• CIRCL / traceroute-circl
  Traceroute improved wrapper for CSIRT and CERT operators
  ☆39Updated last year
• mitre / unfetter-mediawiki-vagrant
  A virtual MediaWiki development environment, built on Vagrant, VirtualBox, and Puppet.
  ☆16Updated 9 years ago