Alternatives and similar repositories for SANS_THIR16:

Users that are interested in SANS_THIR16 are comparing it to the libraries listed below

• jipegit / IRNotes
  Some IR notes
  ☆73Updated 8 years ago
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 5 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• crits / pycrits
  Python interface to the CRITs API
  ☆22Updated 8 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• lolnate / vt-hunter
  Automation for VirusTotal
  ☆31Updated 8 years ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• paralax / BurningDogs
  Honeypot log processor to create OTX Pulse entries
  ☆29Updated last year
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆28Updated 10 years ago
• EC-DIGIT-CSIRC / VirusTotal-Tools
  ☆36Updated 8 years ago
• bandrel / OCyara
  Performs OCR on image files and scans them for matches to YARA rules
  ☆41Updated 6 years ago
• r3comp1le / VT-Hunter
  Manage VT Alerts
  ☆62Updated 8 years ago
• neu5ron / WinLogsZero2Hero
  This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.
  ☆22Updated 7 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• iSIGHTPartners / macaroni_server
  A REST API server for yara event notifications. Mapping file hashes to yara signatures in Elasticsearch for easy hash lookup or finding h…
  ☆19Updated 9 years ago
• adamkramer / shape_shift
  ☆9Updated 7 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 6 years ago
• CrowdStrike / chopshop
  Mitre chopshop network decoder framework
  ☆30Updated 8 years ago
• wolfpack1 / intel_collection_tools
  ☆22Updated 7 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 4 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• RamadhanAmizudin / python-icap-yara
  An ICAP Server with yara scanner for URL and content.
  ☆59Updated 3 months ago
• pmelson / viper-scripts
  Various Modules & Scripts for use with Viper Framework
  ☆27Updated 5 years ago
• xme / cuckoomx
  CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
  ☆41Updated 12 years ago
• adamcrowdstrike / HybridAPI
  Quick tool for using Hybrid Analysis API on command line..
  ☆17Updated 7 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• MinervaLabsResearch / Mystique
  Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…
  ☆82Updated 7 years ago