chrissanders / packets
Packet Captures
☆361Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for packets
- Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/i…☆212Updated last month
- Public Repository of all Publicly Available Packet Captures that I've used or come across☆165Updated 11 years ago
- Main MineMeld documentation repo☆380Updated 7 years ago
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆441Updated 2 years ago
- ☆187Updated 5 months ago
- CLI tool to manage a SIFT Install☆416Updated last year
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆237Updated 3 years ago
- Splunk Boss of the SOC version 2 dataset.☆358Updated 2 years ago
- Evolving directions on building the best Open Source Forensics VM☆159Updated 6 years ago
- Simple Bash IOC Scanner☆697Updated 2 years ago
- An analytical framework for network traffic and behavioral analytics☆449Updated last year
- Zeek Log Cheatsheets☆285Updated 2 years ago
- MISP trainings, threat intel and information sharing training materials with source code☆390Updated this week
- This is a repository for freq.py and freq_server.py☆200Updated 4 years ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆243Updated last year
- SIFT☆492Updated 9 months ago
- A set of Zeek scripts to detect ATT&CK techniques.☆565Updated 4 months ago
- Web application to create indexes for GIAC certification examinations.☆134Updated last year
- Documentation of TheHive☆393Updated last year
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆491Updated 2 years ago
- ☆365Updated 3 months ago
- User guide of MISP☆259Updated last month
- File Scanning Framework☆289Updated 3 years ago
- Hands-On Network Forensics by Nipun Jaswal☆41Updated last year
- Data from a BRAWL Automated Adversary Emulation Exercise☆202Updated 4 years ago
- a network packet capture compiler☆194Updated 2 years ago
- Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…☆123Updated 2 years ago
- ☆131Updated 8 months ago
- ☆208Updated last year
- A collection of sources of indicators of compromise.☆806Updated last month