Alternatives and similar repositories for pyHIDS

Users that are interested in pyHIDS are comparing it to the libraries listed below

• CIRCL / PyPDNS
  Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.
  ☆82Updated last month
• stratosphereips / Manati
  A web-based tool to assist the work of the intuitive threat analysts.
  ☆114Updated 6 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆103Updated 3 years ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆44Updated 8 years ago
• Cymmetria / ciscoasa_honeypot
  A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
  ☆57Updated 7 years ago
• rosehgal / HoneySMB
  Simple High Interaction Honeypot Solution for SMB protocol
  ☆50Updated 4 years ago
• ahm3dhany / IDS-Evasion
  Evading Snort Intrusion Detection System.
  ☆78Updated 4 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆103Updated 3 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆45Updated 6 years ago
• certsocietegenerale / abuse_finder
  Find abuse contacts for observables
  ☆70Updated 3 years ago
• zeroq / amun
  Amun Honeypot
  ☆64Updated last year
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated 2 years ago
• CERT-Polska / n6
  Automated handling of data feeds for security teams
  ☆146Updated last week
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 5 years ago
• passivetotal / python_api
  Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
  ☆86Updated 2 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 6 months ago
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆108Updated 7 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated 2 years ago
• adulau / threat-intelligence.eu
  threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…
  ☆49Updated 2 months ago
• InQuest / sandboxapi
  Minimal, consistent Python API for building integrations with malware sandboxes.
  ☆140Updated last year
• phishdetect / phishdetect
  PhishDetect is a library to help identify phishing pages
  ☆109Updated 2 years ago
• treussart / ProbeManager
  Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
  ☆71Updated 6 years ago
• bez0r / pDNS2
  Passive DNS V2
  ☆60Updated 11 years ago
• tenable / yara-rules
  Repository of yara rules
  ☆60Updated 3 years ago
• armedpot / honeytrap
  Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
  ☆44Updated 4 years ago
• shiva-spampot / shiva
  Spam Honeypot with Intelligent Virtual Analyzer
  ☆139Updated 9 months ago
• mitre / caret
  CARET - A tool for viewing cyber analytic relationships
  ☆55Updated 5 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆108Updated 4 years ago
• stratosphereips / StratosphereTestingFramework
  The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …
  ☆50Updated 7 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago