hackertarget / pcap-did-what
Analyze pcaps with Zeek and a Grafana Dashboard
☆163Updated 8 months ago
Alternatives and similar repositories for pcap-did-what:
Users that are interested in pcap-did-what are comparing it to the libraries listed below
- Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.☆190Updated 3 weeks ago
- An automated Breach and Attack Simulation lab with terraform. Built for IaC stability, consistency, and speed.☆181Updated 7 months ago
- A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…☆167Updated 2 months ago
- Canary Detection☆164Updated 9 months ago
- Dredging up secrets from the depths of the file system☆118Updated 2 months ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆232Updated this week
- Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.☆51Updated 3 weeks ago
- God Mode Detection Rules☆133Updated 5 months ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆60Updated 2 weeks ago
- A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.☆137Updated 2 weeks ago
- Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.☆228Updated this week
- Mapping of open-source detection rules and atomic tests.☆110Updated last week
- A Powerful Network Reconnaissance Tool for Security Professionals☆100Updated last month
- A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.☆242Updated this week
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆246Updated last year
- Halberd : Multi-Cloud Attack Platform☆241Updated this week
- SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.☆76Updated this week
- Advanced Bash script designed for conducting digital forensics on Linux systems☆138Updated 9 months ago
- ☆70Updated 3 months ago
- ☆73Updated 3 weeks ago
- Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping☆47Updated this week
- A collection of companies that disclose adversary TTPs after they have been breached☆244Updated 9 months ago
- Automation tool for Windows Deception Host Burn-In☆81Updated last month
- VirtualGHOST Detection Tool☆89Updated 8 months ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆99Updated 2 years ago
- ☆162Updated 10 months ago
- HASH (HTTP Agnostic Software Honeypot)☆135Updated 8 months ago
- PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection…☆246Updated last week
- WolfPack combines the capabilities of Terraform and Packer to streamline the deployment of red team redirectors on a large scale.☆146Updated this week
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆145Updated 4 months ago