cedricbonhomme / pyHIDSLinks
A HIDS (host-based intrusion detection system) for verifying the integrity of a system.
☆60Updated this week
Alternatives and similar repositories for pyHIDS
Users that are interested in pyHIDS are comparing it to the libraries listed below
Sorting:
- Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.☆82Updated last month
- A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.☆57Updated 7 years ago
- A web-based tool to assist the work of the intuitive threat analysts.☆114Updated 6 years ago
- Passive DNS collection using Zeek☆182Updated 2 years ago
- Simple High Interaction Honeypot Solution for SMB protocol☆50Updated 4 years ago
- Malware Sinkhole List in various formats☆103Updated 3 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 6 months ago
- Scripts to detect Fast-Flux and DGA using DNS query responses☆44Updated 8 years ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆161Updated 9 months ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- How to Zeek Sysmon Logs!☆103Updated 3 years ago
- ☆35Updated 2 years ago
- Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...☆71Updated 6 years ago
- Malware/IOC ingestion and processing engine☆108Updated 7 years ago
- ☆52Updated 7 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆112Updated last year
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- a network packet capture compiler☆205Updated 3 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆108Updated 4 years ago
- Web service for scanning pcaps with snort☆110Updated 7 years ago
- Vulnerability Information Aggregator for CVEs☆124Updated 6 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 5 years ago
- Automated handling of data feeds for security teams☆146Updated last week
- Cyber Threat Intelligence Feeds☆96Updated 9 years ago
- Minimal, consistent Python API for building integrations with malware sandboxes.☆141Updated last year
- collector/runner☆64Updated 4 months ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 7 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated 2 years ago
- JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox☆45Updated 6 years ago
- A map displaying threat actors from the misp-galaxy☆33Updated 2 years ago