dnsdb / dnsdb-query
DNSDB query scripts
☆75Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for dnsdb-query
- Bro scripts to be shared with the community☆109Updated 11 years ago
- Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc…☆79Updated 8 years ago
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆96Updated 8 years ago
- ☆72Updated 3 years ago
- Script for generating Bro intel files from pdf or html reports☆75Updated 8 years ago
- Threat Analysis, Reconnaissance, and Data Intelligence System☆121Updated 9 years ago
- A framework for receiving and redistributing abuse feeds☆118Updated 5 years ago
- Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.☆115Updated 8 years ago
- CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)☆41Updated 12 years ago
- ☆76Updated 2 years ago
- Passive DNS V2☆62Updated 10 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- Various Bro scripts☆96Updated 8 years ago
- IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.☆135Updated 8 years ago
- A Framework for managing Cyber Threat Intelligence.☆5Updated 6 years ago
- Docker container for MISP☆96Updated 6 years ago
- Credential Phish Analysis and Automation☆96Updated 6 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Updated 10 years ago
- threat language parser☆60Updated 9 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆34Updated 8 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆79Updated 8 years ago
- Parse URLCrazy and dnstwist output and compare against previous runs to identify new typosquatted domains.☆51Updated 9 years ago
- Collecting & Hunting for IOCs with gusto and style☆116Updated 6 years ago
- Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…☆144Updated 10 years ago
- YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signat…☆69Updated 5 years ago
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 10 years ago