Alternatives and similar repositories for hardenedlinux-zeek-scripts:

Users that are interested in hardenedlinux-zeek-scripts are comparing it to the libraries listed below

• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• u2400 / libc_hook_demo
  一个HIDS agent端的demo
  ☆17Updated 4 years ago
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 4 years ago
• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 5 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆164Updated 5 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 5 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆32Updated 4 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆16Updated 5 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆15Updated 4 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆111Updated 7 years ago
• mylamour / Oops-Webshell
  Oops, It's funny to detect a webshell. Temporarily not maintained
  ☆18Updated 7 years ago
• shubhamshubhankar / autoSource
  Automated SonarQube
  ☆73Updated 5 years ago
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Updated 6 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 4 years ago
• Cisco-Talos / Re2Pcap
  ☆54Updated 7 months ago
• RF-CTI / SANS-summit
  ☆30Updated last year
• xing-xiao / Maneo-Detect-Behinder
  基于Flink实现实时冰蝎(Behinder)流量检测
  ☆40Updated 5 years ago
• JiaHeng-DLUT / Webshell-samples
  webshell and nonwebshell samples，which can be used to train machine learning models to detect webshell
  ☆43Updated 5 years ago
• baidu-security / webshell-scanner-client
  A golang client of our webshell scanner API
  ☆28Updated 6 years ago
• havysec / vulnerable-scene
  一些漏洞场景的还原，基于https://www.exploit-db.com/
  ☆36Updated 7 years ago
• seecode-audit / clocwalk
  Project code and dependent component analysis tools.
  ☆2Updated last year
• jiansiting / ripple20-poc
  Treck Network Stack Discovery Tool by JSOF
  ☆32Updated 4 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 5 years ago
• knownsec / Minitools-bin_extractor
  A simple script for quickly mining sensitive information in binary files.
  ☆29Updated 4 years ago
• TideSec / Scanners-Box
  A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
  ☆16Updated 10 months ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• Sep0lkit / Blog
  Sep0lkit's Blog
  ☆15Updated 4 years ago
• jvdroit / Suricata-rules
  ☆9Updated 8 years ago
• xssfile / Attack-data
  Attack data
  ☆25Updated 6 years ago