ccss-sandia / antfarmLinks
Passive network mapping tool written in Ruby
☆15Updated 11 years ago
Alternatives and similar repositories for antfarm
Users that are interested in antfarm are comparing it to the libraries listed below
Sorting:
- Splunk Boss of the SOC v1 data set.☆113Updated 7 years ago
- Converts serial IP data, typically collected from Industrial Control System devices, to the more commonly used Packet Capture (PCAP) form…☆82Updated 8 years ago
- Sandia Cyber Omni Tracker (SCOT)☆252Updated last year
- collection of bro and bash scripts that when run from the same directory on Linux distro with bro installed, will pull information such a…☆12Updated 9 years ago
- ☆194Updated last year
- CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities☆189Updated last year
- Cuckoo Sandbox is an automated dynamic malware analysis system☆107Updated 5 years ago
- Collecting & Hunting for IOCs with gusto and style☆117Updated 7 years ago
- Tools to search through massive amounts of data☆21Updated 2 months ago
- Moki Distribution - ICS/SCADA Tools☆112Updated 8 years ago
- Open source tools for realistic-behaving electric grid honeynets☆58Updated 10 years ago
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆122Updated 4 years ago
- GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1…☆144Updated 7 years ago
- ☆50Updated 5 years ago
- Multithreaded threat Intelligence gathering built with Python3☆177Updated 7 years ago
- GasPot Released at Blackhat 2015☆144Updated last year
- STIX Visualization Tool☆110Updated 7 years ago
- ☆31Updated 8 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- Tom's Honey Pot as seen in Applied Network Security Monitoring.☆27Updated 10 years ago
- SEC599 supporting GitHub repository☆16Updated 6 years ago
- InvestigationPlaybookSpec☆72Updated 8 years ago
- CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by lever…☆131Updated 7 years ago
- The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365☆181Updated 5 years ago
- Main Build directory☆179Updated 6 years ago
- Threat Feed Aggregation, Made Easy☆169Updated 5 years ago
- Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.☆68Updated 5 years ago
- This repository is created to add value to existing Network Security Monitoring solutions.☆43Updated 9 years ago
- Sample files for Control Things Platform☆41Updated 7 months ago
- ☆73Updated 7 years ago