Alternatives and similar repositories for greybox:

Users that are interested in greybox are comparing it to the libraries listed below

• cmu-sei / topgen
  Scripts to generate an Internet simulation
  ☆34Updated 5 months ago
• activecm / docker-zeek
  Run zeek with zeekctl in docker
  ☆51Updated 4 months ago
• randomuserid / Tylium
  Primary data pipelines for intrusion detection, security analytics and threat hunting
  ☆86Updated 3 years ago
• cmu-sei / TopoMojo-v1
  Virtual Lab builder and player
  ☆15Updated 3 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• socprime / soc_workflow_app_ce
  SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…
  ☆94Updated 2 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• thomaspatzke / elk-detection-lab
  An ELK environment containing interesting security datasets.
  ☆133Updated 4 years ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆37Updated 2 years ago
• teamdfir / volatility-plugins-community
  Volatility plugins developed and maintained by the community
  ☆21Updated 4 months ago
• SMAPPER / NXLog-AutoConfig
  ☆48Updated 4 years ago
• activecm / devprof
  Device profile: Define acceptable amounts of traffic for your devices and see a report of outliers.
  ☆16Updated 5 years ago
• high101bro / PoSh-EasyWin
  PowerShell - Endpoint Analysis Solution Your Windows Intranet Needs
  ☆46Updated last month
• da667 / AutoMISP
  automate your MISP installs
  ☆66Updated 4 years ago
• sans-blue-team / freq.py
  Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…
  ☆124Updated 2 years ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 3 years ago
• sevickson / osquery_tables_graph
  Repository containing Jupyter Notebooks for working with OSQuery tables and data
  ☆16Updated 4 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆47Updated 6 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 4 years ago
• sans-blue-team / NSM
  This repository is created to add value to existing Network Security Monitoring solutions.
  ☆42Updated 8 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆72Updated last year
• csirtgadgets / cif-v5
  The FASTEST way to consume threat intel.
  ☆66Updated last year
• sans-blue-team / sec530-wiki
  ☆54Updated 3 years ago
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆90Updated 7 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆53Updated last month
• rocknsm / rock-dashboards
  Dashboards and loader for ROCK NSM dashboards
  ☆48Updated last year
• corelight / raspi-corelight
  Corelight@Home script
  ☆40Updated last year
• chaoticmachinery / frac_rift
  FRAC and RIFT
  ☆17Updated 5 years ago
• cmu-sei / foundry-appliance
  A virtual appliance for building cyber labs, challenges and competitions
  ☆23Updated last month
• securitydistractions / elastimispstash
  ☆29Updated 3 years ago