Alternatives and similar repositories for socbed:

Users that are interested in socbed are comparing it to the libraries listed below

• fkie-cad / amides
  An Adaptive Misuse Detection System
  ☆36Updated 3 months ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆76Updated 3 years ago
• iomoath / yara-scanner
  YaraScanner is a file pattern-matching tool based on YARA rules.
  ☆56Updated last year
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated 9 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆105Updated 2 weeks ago
• tstromberg / sunlight
  Linux #rootkit and #malware revealer
  ☆23Updated 6 months ago
• dfir-ronin / APT-OpenIOC-Detection-Rules
  This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…
  ☆23Updated last year
• threatcat-ch / malware-analysis-pipeline
  Lightweight Python-Based Malware Analysis Pipeline
  ☆34Updated last week
• 3c7 / bazaar
  Python based CLI for MalwareBazaar
  ☆36Updated 3 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆77Updated last year
• myrtus0x0 / SMAT
  Standardized Malware Analysis Tool
  ☆52Updated 3 years ago
• delivr-to / detections
  A home for detection content developed by the delivr.to team
  ☆67Updated 2 weeks ago
• markuskont / pikksilm
  Look into EDR events from network
  ☆23Updated 10 months ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆73Updated 11 months ago
• plonxyz / 4n6pi
  ☆17Updated 6 months ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆65Updated last year
• MISP / SkillAegis
  SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…
  ☆22Updated last week
• mitre / atomic
  A MITRE Caldera plugin
  ☆41Updated 3 months ago
• mitre / emu
  This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
  ☆30Updated last year
• malpedia / malpedia-flossed
  FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
  ☆50Updated 11 months ago
• 3CORESec / Automata
  Automatic detection engineering technical state compliance
  ☆54Updated 7 months ago
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆63Updated 2 years ago
• viper-framework / viper2
  File analysis and management framework.
  ☆82Updated last year
• AttackIQ / SigmAIQ
  A pySigma wrapper and langchain toolkit for automatic rule creation/translation
  ☆74Updated this week
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆76Updated last year
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated last year
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆32Updated 2 months ago
• priamai / sigmatau
  An extension of the sigma standard to include security metrics.
  ☆15Updated last year
• silverfort-open-source / latma
  ☆79Updated last year