Alternatives and similar repositories for tools:

Users that are interested in tools are comparing it to the libraries listed below

• demisto / alfred
  A Slack bot to add security info to messages containing URLs, hashes and IPs
  ☆71Updated 6 months ago
• demisto / demisto-py
  Demisto Client for Python
  ☆70Updated last week
• demisto / COPS
  Collaborative Open Playbook Standard
  ☆154Updated last year
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 6 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 6 years ago
• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆110Updated last month
• rkovar / splunk-hunting-helpers
  ☆54Updated 3 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆45Updated 5 years ago
• daveherrald / botsv1
  Splunk Boss of the SOC v1 data set.
  ☆111Updated 6 years ago
• MISP / MISP-Taxii-Server
  An OpenTAXII Configuration for MISP
  ☆81Updated 2 years ago
• et0x / Incident-Response
  ☆36Updated 8 years ago
• SMAPPER / NXLog-AutoConfig
  ☆48Updated 4 years ago
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated last year
• P1llus / ArcSight-Rest
  Python library for the ArcSight logger REST API
  ☆27Updated 3 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆72Updated last year
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆76Updated 9 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆46Updated 6 years ago
• sans-blue-team / NSM
  This repository is created to add value to existing Network Security Monitoring solutions.
  ☆42Updated 8 years ago
• timmolter / logstash-dfir
  Logstash configuration files for analyzing various types of logs
  ☆25Updated 8 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago
• PaloAltoNetworks / ioc-parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆71Updated 8 months ago
• MISP / MISP-STIX-Converter
  A utility repo to assist with converting between MISP and STIX formats
  ☆67Updated 4 years ago
• zeek / cheat-sheet
  The Bro/Zeek language cheat sheet
  ☆51Updated 12 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• IBM / data-import
  ☆48Updated 9 years ago
• tanium / SplunkforTanium
  This is the Splunk App integrated with Tanium
  ☆10Updated 7 years ago