Alternatives and similar repositories for WinTAP:

Users that are interested in WinTAP are comparing it to the libraries listed below

• Neo23x0 / webshell-intel
  Scan web server for known webshell names and responses
  ☆50Updated 8 years ago
• ncsa / bro-simple-scan
  ☆14Updated 11 months ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 4 years ago
• nextgens / limacharlie
  Endpoint monitoring stack.
  ☆18Updated 9 years ago
• mnemonic-no / dnscache
  Volatility memory forensics plugin for extracting Windows DNS Cache
  ☆29Updated 8 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 7 years ago
• upa / ofpot
  OpenFlow Honeypot
  ☆23Updated 12 years ago
• plashchynski / viewssld
  viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…
  ☆74Updated 7 years ago
• Malicious-Entity / Get-Entity
  Scripts to query local admins quickly
  ☆9Updated 9 years ago
• redBorder / daq
  Snort/Suricata DAQ module with DPDK patch
  ☆11Updated 11 months ago
• EmergingThreats / IDSDeathBlossom
  IDS Utility Belt For Automating/Testing Various Things
  ☆30Updated 4 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆44Updated 5 years ago
• wolfpack1 / threatrecon
  API Tools
  ☆27Updated 8 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 7 years ago
• jantonakos / ThreatHuntingExcursions
  Code, commands, and chatter about Threat Hunting.
  ☆35Updated 5 years ago
• udishamir / Domain-Analyzer
  Detect malicious domain, Blablablablabla
  ☆26Updated 8 years ago
• socprime / SigmaRulesIntegration
  ☆15Updated 7 years ago
• sketchymoose / TotalRecall
  Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…
  ☆49Updated 7 years ago
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆23Updated last year
• kost / docker-moloch
  A Docker container for Moloch based on minimal Debian
  ☆26Updated 9 years ago
• elceef / dhcpf
  Passive DHCP fingerprinting implementation
  ☆51Updated 8 years ago
• MITRECND / bro-http2
  Plugin for Zeek/Bro which provides http2 decoder/analyzer
  ☆31Updated 9 months ago
• armedpot / honeytrap
  Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
  ☆43Updated 3 years ago
• fireeye / brocapi
  Bro PCAP Processing and Tagging API
  ☆28Updated 7 years ago
• set-element / auditdBroFramework
  The Auditd Framework logs and applies security policy to linux auditd data
  ☆15Updated 7 years ago
• 0xAnalyst / Sysmon
  Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
  ☆55Updated 8 months ago
• travisbgreen / intel_amt_honeypot
  intel amt honeypot
  ☆18Updated 7 years ago
• reed1713 / ELAT
  Event Log Analysis Tools
  ☆29Updated 8 years ago
• abhinavbom / Yara-Rules
  A collection of Yara rules I have created so far
  ☆16Updated 4 years ago
• xti9er / rootkit_checker
  --= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er
  ☆15Updated 4 years ago