Alternatives and similar repositories for WinTAP

Users that are interested in WinTAP are comparing it to the libraries listed below

• plashchynski / viewssld
  viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…
  ☆74Updated 8 years ago
• nextgens / limacharlie
  Endpoint monitoring stack.
  ☆19Updated 10 years ago
• ncsa / bro-simple-scan
  ☆14Updated last week
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆45Updated 6 years ago
• TKCERT / winnti-detector
  Network detector for Winnti malware
  ☆21Updated 7 years ago
• mnemonic-no / dnscache
  Volatility memory forensics plugin for extracting Windows DNS Cache
  ☆29Updated 8 years ago
• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆38Updated 9 years ago
• fireeye / brocapi
  Bro PCAP Processing and Tagging API
  ☆28Updated 8 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆21Updated 5 years ago
• hosom / bro-phishing
  Detect Phishing with Bro IDS
  ☆19Updated 8 years ago
• EmergingThreats / IDSDeathBlossom
  IDS Utility Belt For Automating/Testing Various Things
  ☆30Updated 5 years ago
• reed1713 / ELAT
  Event Log Analysis Tools
  ☆31Updated 9 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• bez0r / pDNS2
  Passive DNS V2
  ☆60Updated 11 years ago
• libyal / libevt
  Library and tools to access the Windows Event Log (EVT) format
  ☆60Updated last month
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆25Updated 2 years ago
• PoorBillionaire / Windows-Prefetch-Carver
  Carve Windows Prefetch files from arbitrary binary data
  ☆16Updated 8 years ago
• serializingme / emofishes
  Emofishes is a collection of proof-of-concepts that help improve, bypass or detect virtualized execution environments (focusing on the on…
  ☆15Updated 2 years ago
• upa / ofpot
  OpenFlow Honeypot
  ☆25Updated 13 years ago
• zacbrown / hiddentreasure-etw-demo
  Basic demo for Hidden Treasure talk.
  ☆49Updated 8 years ago
• clong / vagrant-ids
  An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk
  ☆23Updated 7 years ago
• nettitude / logparser
  SQL scripts for querying event logs
  ☆21Updated 8 years ago
• mitre / unfetter-mediawiki-vagrant
  A virtual MediaWiki development environment, built on Vagrant, VirtualBox, and Puppet.
  ☆16Updated 9 years ago
• K2 / Scripting
  PS / Bash / Python / Other scripts For FUN!
  ☆56Updated 2 months ago
• 0xAnalyst / Sysmon
  Sysmon config for both Windows and Linux Devices. Windows one is a bit dated
  ☆55Updated last year
• corelan / dnshjmon
  dnshjmon is a free tool to monitor public DNS records and report hijacks
  ☆91Updated 12 years ago
• exp0se / detect_kerberos_attacks
  Detect kerberos attacks in pcap files
  ☆29Updated 10 years ago
• jantonakos / ThreatHuntingExcursions
  Code, commands, and chatter about Threat Hunting.
  ☆35Updated 6 years ago
• Neo23x0 / webshell-intel
  Scan web server for known webshell names and responses
  ☆50Updated 9 years ago
• MITRECND / bro-http2
  Plugin for Zeek/Bro which provides http2 decoder/analyzer
  ☆31Updated last year