Alternatives and similar repositories for tools

Users that are interested in tools are comparing it to the libraries listed below

• demisto / demisto-py
  Demisto Client for Python
  ☆72Updated 2 months ago
• demisto / alfred
  A Slack bot to add security info to messages containing URLs, hashes and IPs
  ☆71Updated last year
• demisto / COPS
  Collaborative Open Playbook Standard
  ☆157Updated 2 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 7 years ago
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆44Updated 6 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 5 years ago
• crits / crits_services
  CRITs Services Collection
  ☆184Updated 4 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆187Updated last year
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 8 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 6 years ago
• PaloAltoNetworks / ioc-parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆74Updated last year
• vmware-archive / cbapi
  Carbon Black API Resources
  ☆93Updated 7 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆73Updated 2 years ago
• MISP / MISP-Taxii-Server
  An OpenTAXII Configuration for MISP
  ☆84Updated 3 years ago
• IBM / data-import
  ☆48Updated 9 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆91Updated 8 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆148Updated 4 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆49Updated 11 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆140Updated 2 years ago
• opensourcesec / Forager
  Multithreaded threat Intelligence gathering built with Python3
  ☆176Updated 7 years ago
• jonschipp / ISLET
  Isolated, Scalable, & Lightweight Environment for Training
  ☆111Updated 6 years ago
• STIXProject / stix-viz
  STIX Visualization Tool
  ☆109Updated 7 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆77Updated 9 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆82Updated 9 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 4 years ago
• SMAPPER / NXLog-AutoConfig
  ☆50Updated 5 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆145Updated last year