Alternatives and similar repositories for TA-cyberchef

Users that are interested in TA-cyberchef are comparing it to the libraries listed below

• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 3 years ago
• n3l5 / irFARTpull
  PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
  ☆50Updated 7 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 4 years ago
• opensourcesec / cblrconsole
  Carbonblack Live Response from the comfort of your own terminal
  ☆20Updated 9 years ago
• SecurityNik / QRadar---Threat-Intelligence-On-The-Cheap
  Download a list of suspected malicious IPs and Domains. Create a QRadar Reference Set. Search Your Environment For Malicious IPs
  ☆69Updated 4 years ago
• glassdfir / SysmonMapper
  Maps process creation logged by Sysmon uses Google Org Chart API
  ☆23Updated 9 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 7 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 6 years ago
• daveherrald / botsv1
  Splunk Boss of the SOC v1 data set.
  ☆111Updated 7 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• et0x / Incident-Response
  ☆36Updated 8 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• SMAPPER / NXLog-AutoConfig
  ☆49Updated 5 years ago
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆44Updated 6 years ago
• teamdfir / concordance
  Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.
  ☆67Updated 5 years ago
• halpomeranz / linewatch
  ☆18Updated 10 years ago
• Jrotenberger / CBIRAutomation
  CB API scripts for IR, administration, etc.
  ☆32Updated 6 years ago
• tanium / SplunkforTanium
  This is the Splunk App integrated with Tanium
  ☆10Updated 7 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 5 years ago
• ibm-security-intelligence / visualizations
  Samples of visualization add-ons to QRadar, utilizing public REST APIs
  ☆33Updated 9 years ago
• georgestarcher / Splunk-ESIntel-KVStore
  Splunk csv to KVStore ES Threat Intel
  ☆11Updated 9 years ago
• dstaulcu / TA-Sigma-Searches
  A Splunk app with saved reports derived from Sigma rules
  ☆73Updated 7 years ago
• EmergingThreats / bro
  Bro things..
  ☆15Updated 9 years ago
• teamdfir / volatility-plugins-community
  Volatility plugins developed and maintained by the community
  ☆21Updated 11 months ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆47Updated 7 years ago
• jorritfolmer / TA-dmarc
  Add-on for ingesting DMARC aggregate reports into Splunk
  ☆15Updated 2 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆187Updated last year
• vmware-archive / cbapi
  Carbon Black API Resources
  ☆93Updated 7 years ago
• MISP / MISP-Taxii-Server
  An OpenTAXII Configuration for MISP
  ☆83Updated 2 years ago