Alternatives and similar repositories for ThreatHunter-Playbook:

Users that are interested in ThreatHunter-Playbook are comparing it to the libraries listed below

• trustedsec / RisingSun
  RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.
  ☆10Updated 4 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 9 years ago
• bfuzzy / ThreatHunter-Playbook
  A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
  ☆14Updated 6 years ago
• mdegrazia / OnionPeeler
  Python script to batch query the Tor Relays and Bridges
  ☆36Updated 6 years ago
• JacobPimental / gunslinger
  Gunslinger is used to hunt for Magecart sites using URLScan's API
  ☆30Updated 3 years ago
• laconicwolf / random-python
  Various Python scripts that have come in handy but aren't important enough to get their own repository
  ☆22Updated 4 years ago
• Fallenour / Venator
  Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…
  ☆21Updated 7 years ago
• jaredhaight / scripts
  A collection of scripts that I've written while pentesting.
  ☆31Updated 6 years ago
• dafthack / blackhat-arsenal-tools
  Official Black Hat Arsenal Security Tools Repository
  ☆21Updated 7 years ago
• dsnezhkov / foxtrot
  C&C to deliver files and shuttle command execution instructions between an external actor and an internal agent with the help of Firefox …
  ☆38Updated 2 years ago
• paranoidninja / Threat-Hunting
  This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…
  ☆56Updated 7 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 6 years ago
• activeshadow / maltego-nmap
  A few transforms and a machine for parsing Nmap XML results
  ☆37Updated 8 years ago
• pentestgeek / phishing-frenzy-cookbook
  Automated install process for Phishing Frenzy
  ☆23Updated 10 years ago
• digininja / sitediff
  Fingerprint a web app using local files as the fingerprint sources
  ☆38Updated 7 years ago
• inishantgrover / Shodmon
  The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided
  ☆33Updated 3 years ago
• joda32 / got-responded
  A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
  ☆36Updated 6 years ago
• nccgroup / WebFEET
  Web Filter External Enumeration Tool (WebFEET)
  ☆75Updated 10 years ago
• darkoperator / pyforensics
  Collection of single use scripts I worte for windows forensics
  ☆27Updated 13 years ago
• zkvL / secutils
  ☆18Updated last year
• HarmJ0y / NetRipper
  NetRipper - Smart traffic sniffing for penetration testers
  ☆17Updated 9 years ago
• OneLogicalMyth / toolkit
  Collection of scripts and tools that I created to aid in my testing.
  ☆14Updated 3 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆39Updated 8 years ago
• porterhau5 / BloodHound
  Six Degrees of Domain Admin
  ☆15Updated 7 years ago
• fl0x2208 / Memoirs-of-a-Threat-Hunter
  My personal experience in Threat Hunting and knowledge gained so far.
  ☆19Updated 7 years ago
• Raikia / Get-ReconInfo
  A powershell script that prints a lot of IP and connection info to the screen
  ☆31Updated 8 years ago
• noncetonic / phishpoll
  PHP Phishing Framework
  ☆28Updated 11 years ago
• ChrisTruncer / gnmap-parser
  Script to parse multiple Nmap .gnmap exports into various plain-text formats for easy analysis.
  ☆24Updated 10 years ago
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆23Updated last year
• PivotAll / PivotAll
  Comprehensive Pivoting Framework
  ☆20Updated 8 years ago