Alternatives and similar repositories for logdissect

Users that are interested in logdissect are comparing it to the libraries listed below

• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆88Updated 6 years ago
• csirtgadgets / csirtg-mail-py
  The FASTEST way to parse Email
  ☆17Updated 3 years ago
• veeral-patel / incidents
  Please use https://github.com/veeral-patel/true-positive instead
  ☆69Updated 2 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• EmersonElectricCo / boomerang
  A tool designed for consistent and safe capture of off network web resources.
  ☆39Updated 8 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆48Updated 2 years ago
• IntegralDefense / ACE
  Analysis Correlation Engine
  ☆26Updated 6 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆122Updated 4 years ago
• SpamScope / spamscope
  Fast Advanced Spam Analysis Tool
  ☆301Updated last month
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 6 years ago
• ioc-fang / ioc-fanger
  Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
  ☆65Updated last year
• barnumbirr / ares
  A python wrapper around https://cve.circl.lu.
  ☆55Updated 3 months ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 5 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆263Updated 2 years ago
• marcusbakker / GreyNoise
  Python tool build around GreyNoise's alpha/public API
  ☆11Updated 6 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆106Updated last year
• opendns / pyinvestigate
  Python module to interface with the OpenDNS Investigate API
  ☆63Updated 3 years ago
• MarkBaggett / apiify
  Wrap any binary into a cached webserver
  ☆54Updated 3 years ago
• teamdfir / sift-saltstack
  Salt States for Configuring the SIFT Workstation
  ☆105Updated last week
• Soinull / assimilate
  Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers
  ☆91Updated 7 years ago
• certsocietegenerale / event2timeline
  Simple Microsoft Windows sessions event logs visualization
  ☆152Updated 3 years ago
• rocknsm / docket
  A RESTful API frontend for Stenographer
  ☆54Updated 2 years ago
• nsacyber / WALKOFF-Apps
  WALKOFF-enabled applications. #nsacyber
  ☆144Updated 6 years ago
• csirtgadgets / bearded-avenger-deploymentkit
  CIFv3 DeploymentKit
  ☆64Updated 5 years ago
• kamushadenes / cefevent
  ArcSight's Common Event Format library
  ☆39Updated last year
• certtools / intelmq-manager
  IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.
  ☆105Updated last month
• adulau / misp-osint-collection
  Collection of best practices to add OSINT into MISP and/or MISP communities
  ☆66Updated last year
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆52Updated 2 months ago
• philhagen / ip2geo
  Script to perform bulk local GeoIP lookups (ASN and geo) for IP addresses
  ☆102Updated 5 years ago