Alternatives and similar repositories for ThreatHunter-Playbook

Users that are interested in ThreatHunter-Playbook are comparing it to the libraries listed below

• gburkle / Stalker
  Threat Intel and Incident Reponse
  ☆10Updated 7 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 6 years ago
• paranoidninja / Threat-Hunting
  This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…
  ☆56Updated 7 years ago
• rshipp / ir-triage-toolkit
  Create an incident response triage toolkit for use with Windows or Linux.
  ☆18Updated 5 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• austin-taylor / bluewall
  Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
  ☆106Updated 6 years ago
• joda32 / got-responded
  A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
  ☆36Updated 6 years ago
• Fallenour / Venator
  Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…
  ☆21Updated 8 years ago
• LDO-CERT / FireEye2TH
  FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform
  ☆16Updated 6 years ago
• trustedsec / RisingSun
  RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.
  ☆10Updated 4 years ago
• gr4ym4ntx / attackintel
  A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
  ☆66Updated 6 years ago
• bfuzzy / ThreatHunter-Playbook
  A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
  ☆14Updated 7 years ago
• jobroche / Pastepwnd
  Identify compromised domains or emails. A python based HIBP and HackedEmails wrapper
  ☆39Updated 6 years ago
• thirdeyeintelligence / Tools-mindmap
  mindmap created for tools can be used during analysis/investigation
  ☆27Updated 8 years ago
• joswr1ght / pcaphistogram
  Generate a histogram of TCP and UDP payload bytes from a pcap file
  ☆24Updated 3 years ago
• Cyb3rWard0g / CyberWardogLab
  A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…
  ☆55Updated 7 years ago
• ins1gn1a / Pwdlyser-CLI
  Python-based CLI Password Analyser (Reporting Tool)
  ☆32Updated 4 years ago
• daguy666 / Transit
  MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
  ☆20Updated 5 years ago
• dafthack / PassphraseGen
  A script for generating custom passphrase lists to be used for password cracking with hashcat rules
  ☆80Updated 7 years ago
• triw0lf / urlscan_scripts
  A bunch of scripts I use to work with urlscan.io
  ☆34Updated 5 years ago
• zkvL / secutils
  ☆18Updated last year
• sans-blue-team / course_indices
  Indices for courses in SANS' Network Security Operations curriculum
  ☆16Updated 9 years ago
• pentestpartners / mykali
  Linux setup tool for Kali Linux
  ☆79Updated 7 years ago
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆23Updated 2 years ago
• OneLogicalMyth / toolkit
  Collection of scripts and tools that I created to aid in my testing.
  ☆14Updated 3 years ago
• JacobPimental / gunslinger
  Gunslinger is used to hunt for Magecart sites using URLScan's API
  ☆31Updated 3 years ago
• laconicwolf / random-python
  Various Python scripts that have come in handy but aren't important enough to get their own repository
  ☆22Updated 4 years ago
• activeshadow / maltego-nmap
  A few transforms and a machine for parsing Nmap XML results
  ☆39Updated 9 years ago
• mdegrazia / OnionPeeler
  Python script to batch query the Tor Relays and Bridges
  ☆36Updated 6 years ago
• weslambert / securityonion-strelka
  ☆13Updated 6 years ago