Alternatives and similar repositories for pyHIDS

Users that are interested in pyHIDS are comparing it to the libraries listed below

• CIRCL / PyPDNS
  Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.
  ☆81Updated 4 months ago
• stratosphereips / Manati
  A web-based tool to assist the work of the intuitive threat analysts.
  ☆113Updated 6 years ago
• armedpot / honeytrap
  Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
  ☆43Updated 3 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆45Updated 6 years ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆43Updated 8 years ago
• bez0r / pDNS2
  Passive DNS V2
  ☆60Updated 11 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆103Updated 3 years ago
• treussart / ProbeManager
  Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...
  ☆72Updated 6 years ago
• ahm3dhany / IDS-Evasion
  Evading Snort Intrusion Detection System.
  ☆78Updated 3 years ago
• Cymmetria / ciscoasa_honeypot
  A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
  ☆52Updated 6 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆102Updated 3 years ago
• alertflex / altprobe
  collector/runner
  ☆65Updated 4 months ago
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆106Updated 6 years ago
• 0x4D31 / honeyku
  A Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
  ☆64Updated 6 years ago
• rosehgal / HoneySMB
  Simple High Interaction Honeypot Solution for SMB protocol
  ☆49Updated 4 years ago
• passivetotal / python_api
  Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
  ☆85Updated 2 years ago
• InQuest / sandboxapi
  Minimal, consistent Python API for building integrations with malware sandboxes.
  ☆139Updated last year
• ozuriexv / SublimeSuricata
  ☆35Updated last year
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆26Updated 3 years ago
• petabi / sniffles
  Sniffles: Packet Capture Generator for IDS and Regular Expression Evaluation
  ☆63Updated 4 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆102Updated last week
• CERT-Polska / n6
  Automated handling of data feeds for security teams
  ☆138Updated 2 weeks ago
• certsocietegenerale / abuse_finder
  Find abuse contacts for observables
  ☆70Updated 2 years ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆155Updated 3 months ago
• binorassocies / brostash
  brostash: Linux distribution based on Debian and focusing on network security events collection
  ☆34Updated 4 years ago
• CERT-Polska / training-materials
  ☆51Updated 6 years ago
• cloudjunky / malware-traffic
  Download all packet captures from http://malware-traffic-analysis.net/
  ☆20Updated 10 years ago
• jusafing / pnaf
  Passive Network Audit Framework
  ☆32Updated 7 years ago
• corelight / http-stalling-detector
  Detect HTTP stalling attacks like slowloris with Bro
  ☆19Updated 7 years ago
• caschnee / misp-use-cases
  ☆14Updated 7 years ago