Alternatives and similar repositories for SANS_THIR16:

Users that are interested in SANS_THIR16 are comparing it to the libraries listed below

• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆62Updated 10 years ago
• cylance / NMAP-Cluster
  Clustering NMAP XML results to help make sense of large scan results.
  ☆33Updated 2 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• crits / pycrits
  Python interface to the CRITs API
  ☆22Updated 8 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• codexgigassys / codex-frontend
  Frontend for Codex Gigas
  ☆21Updated 8 years ago
• conix-security / BTG
  BTG's purpose is to make fast and efficient search on IOC
  ☆70Updated 6 years ago
• neu5ron / WinLogsZero2Hero
  This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.
  ☆22Updated 7 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆48Updated 7 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆82Updated 7 years ago
• wolfpack1 / intel_collection_tools
  ☆22Updated 7 years ago
• swackhamer / vt_notification_puller
  VirusTotal Intelligence Notification Puller
  ☆28Updated 8 years ago
• phage-nz / infosec-bazaar
  A collection of infosec related scripts and information.
  ☆53Updated 6 months ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• et0x / Incident-Response
  ☆36Updated 8 years ago
• bromiley / tools
  Various tools and scripts
  ☆43Updated 2 years ago
• ministryofpromise / tlp
  threat language parser
  ☆60Updated 9 years ago
• pmelson / viper-scripts
  Various Modules & Scripts for use with Viper Framework
  ☆27Updated 5 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• EC-DIGIT-CSIRC / VirusTotal-Tools
  ☆36Updated 8 years ago
• wmetcalf / buildcuckoo-trusty
  A dumb set of scripts for building a cuckoo rig
  ☆61Updated 8 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆37Updated 8 years ago
• adulau / threat-intelligence.eu
  threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…
  ☆48Updated 2 years ago
• BechtelCIRT / beholder
  Beholder is a shell script which installs and configures essentials to peer into your network activity.
  ☆19Updated 7 years ago