Alternatives and similar repositories for tools

Users that are interested in tools are comparing it to the libraries listed below

• demisto / demisto-py
  Demisto Client for Python
  ☆71Updated 3 weeks ago
• demisto / alfred
  A Slack bot to add security info to messages containing URLs, hashes and IPs
  ☆71Updated last year
• demisto / COPS
  Collaborative Open Playbook Standard
  ☆159Updated last month
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 6 years ago
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆117Updated 7 years ago
• vmware-archive / cbapi
  Carbon Black API Resources
  ☆93Updated 8 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆145Updated last year
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆71Updated 8 years ago
• carbonblack / cbfeeds
  Carbon Black Feeds
  ☆73Updated 2 years ago
• crits / crits_services
  CRITs Services Collection
  ☆184Updated 4 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• MISP / MISP-Taxii-Server
  An OpenTAXII Configuration for MISP
  ☆88Updated 3 years ago
• kf0jvt / osq_simulator
  ☆15Updated 10 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆148Updated 4 years ago
• daveherrald / botsv1
  Splunk Boss of the SOC v1 data set.
  ☆113Updated 7 years ago
• IBM / data-import
  ☆48Updated 10 years ago
• STIXProject / stix-viz
  STIX Visualization Tool
  ☆110Updated 7 years ago
• redcanaryco / cbapi2
  Red Canary Carbon Black API
  ☆20Updated 10 years ago
• et0x / Incident-Response
  ☆36Updated 9 years ago
• opensourcesec / Forager
  Multithreaded threat Intelligence gathering built with Python3
  ☆179Updated 8 years ago
• dlcowen / dfirwizard
  Example programs used in the automating DFIR series
  ☆63Updated 6 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 8 years ago
• carbonblack / cb-event-forwarder
  Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.
  ☆73Updated last year
• LogRhythm-Labs / PIE
  The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
  ☆180Updated 5 years ago
• PaloAltoNetworks / ioc-parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆75Updated last year
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆253Updated last year
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆169Updated 5 years ago
• opensourcesec / cblrconsole
  Carbonblack Live Response from the comfort of your own terminal
  ☆20Updated 10 years ago
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆92Updated 8 years ago
• BechtelCIRT / beholder
  Beholder is a shell script which installs and configures essentials to peer into your network activity.
  ☆19Updated 8 years ago