Alternatives and similar repositories for hawk

Users that are interested in hawk are comparing it to the libraries listed below

• telekom-security / acquire-aws-ec2
  A python script to acquire multiple aws ec2 instances in a forensically sound-ish way
  ☆38Updated 4 years ago
• abhinavbom / clara
  Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets
  ☆33Updated 3 weeks ago
• decalage2 / exefilter
  ExeFilter is an open-source tool and framework to filter file formats in e-mails, web pages or files. It detects many common file formats…
  ☆70Updated 4 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Updated 3 years ago
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 3 years ago
• codewatchorg / Burp-Yara-Rules
  Yara rules to be used with the Burp Yara-Scanner extension
  ☆49Updated 4 years ago
• CERT-Bund / IRNetTools
  Incident Response Network Tools
  ☆24Updated 4 years ago
• tenable / yara-rules
  Repository of yara rules
  ☆60Updated 3 years ago
• imp0rtp3 / js-yara-rules
  Yara rules for malicious javascript files from public repositories or written by me.
  ☆13Updated 4 years ago
• CybercentreCanada / assemblyline-core
  Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)
  ☆21Updated this week
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 6 months ago
• thomaspatzke / sigma-workshop
  Elasticsearch/Kibana environment and log data for Sigma workshop
  ☆27Updated 6 years ago
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 5 years ago
• h3x2b / yara-rules
  Yara rules for detecting malware
  ☆23Updated 4 months ago
• malice-plugins / yara
  Malice Yara Plugin
  ☆30Updated 6 years ago
• adulau / hashlookup-server
  Fast lookup server for NSRL and other hash database used in digital forensic
  ☆48Updated 2 weeks ago
• StamusNetworks / surimisp
  Check IOC provided by a MISP instance on Suricata events
  ☆18Updated 6 years ago
• jeFF0Falltrades / YARA-Signatures
  A collection of my public YARA signatures for various malware families
  ☆30Updated last year
• 3c7 / infrastructure-tracking-schema
  ☆24Updated 3 years ago
• cocaman / urlhaus
  ☆28Updated 7 months ago
• c-APT-ure / my-public-stuff
  repo for sharing stuff
  ☆17Updated 7 months ago
• cocaman / analysis_scripts
  Collection of scripts used to analyse malware or emails
  ☆20Updated 5 years ago
• CIRCL / yara-validator
  Validates yara rules and tries to repair the broken ones.
  ☆41Updated 5 years ago
• MISP / PyMISPWarningLists
  Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists
  ☆35Updated last month
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆56Updated 5 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• ciscocsirt / dhp
  Simple Docker Honeypot server emulating small snippets of the Docker HTTP API
  ☆33Updated 5 years ago
• Hestat / lw-yara
  Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
  ☆107Updated 4 years ago
• B0fH / yara-suricata
  A Yara Lua output script for Suricata
  ☆20Updated 6 years ago
• csirt-tooling-org / tooling-directory
  Tools used by CSIRT and especially in the scope of CNW
  ☆17Updated 3 weeks ago