Alternatives and similar repositories for ThreatHunter-Playbook

Users that are interested in ThreatHunter-Playbook are comparing it to the libraries listed below

• joda32 / got-responded
  A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)
  ☆36Updated 6 years ago
• paranoidninja / Threat-Hunting
  This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…
  ☆56Updated 7 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 7 years ago
• trustedsec / RisingSun
  RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.
  ☆10Updated 4 years ago
• gr4ym4ntx / attackintel
  A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
  ☆67Updated 6 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• zkvL / secutils
  ☆18Updated last year
• Fallenour / Venator
  Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…
  ☆21Updated 8 years ago
• thirdeyeintelligence / Tools-mindmap
  mindmap created for tools can be used during analysis/investigation
  ☆27Updated 8 years ago
• austin-taylor / bluewall
  Bluewall is a firewall framework designed for offensive and defensive cyber professionals.
  ☆106Updated 6 years ago
• bfuzzy / ThreatHunter-Playbook
  A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
  ☆14Updated 7 years ago
• SerpicoProject / SerpicoPlugins
  Plugins for the Serpico Project
  ☆23Updated 6 years ago
• LDO-CERT / FireEye2TH
  FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform
  ☆16Updated 7 years ago
• JacobPimental / gunslinger
  Gunslinger is used to hunt for Magecart sites using URLScan's API
  ☆31Updated 3 years ago
• carnal0wnage / malicious_file_maker
  malicious file maker/sender to create and send malicious attachments to test your email filter/alerting
  ☆69Updated 8 years ago
• daguy666 / Transit
  MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
  ☆20Updated 5 years ago
• ins1gn1a / Pwdlyser-CLI
  Python-based CLI Password Analyser (Reporting Tool)
  ☆32Updated 4 years ago
• splinterbotnet / Releases
  Version Releases of Splinter the RAT @Carpenter1010
  ☆32Updated 11 years ago
• jaredhaight / scripts
  A collection of scripts that I've written while pentesting.
  ☆31Updated 7 years ago
• Ne0nd0g / Guinevere
  Automated Security Assessment Reporting Tool
  ☆37Updated 7 years ago
• dafthack / PassphraseGen
  A script for generating custom passphrase lists to be used for password cracking with hashcat rules
  ☆80Updated 7 years ago
• NetSPI / SpoofSpotter
  A tool to catch spoofed NBNS responses.
  ☆50Updated 7 years ago
• trustedsec / HoneyBadger
  ☆81Updated 6 years ago
• activeshadow / maltego-nmap
  A few transforms and a machine for parsing Nmap XML results
  ☆39Updated 9 years ago
• weslambert / securityonion-strelka
  ☆13Updated 6 years ago
• dutchcoders / lootbox
  Lootbox downloads open directories shared on Twitter.
  ☆34Updated 4 years ago
• grayfold3d / POSH-Triage
  Tools for parsing Forensic images
  ☆41Updated 6 years ago
• nccgroup / WebFEET
  Web Filter External Enumeration Tool (WebFEET)
  ☆77Updated 11 years ago
• dmb2168 / OAuthHunting
  ☆53Updated 7 years ago
• clr2of8 / DeployREMnux
  DeployREMnux is a Python script that will deploy a cloud instance of the public REMnux distribution in the Amazon cloud (AWS).
  ☆16Updated 5 years ago