Alternatives and similar repositories for hardenedlinux-zeek-scripts:

Users that are interested in hardenedlinux-zeek-scripts are comparing it to the libraries listed below

• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• baidu-security / webshell-scanner-client
  A golang client of our webshell scanner API
  ☆28Updated 7 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• jiansiting / ripple20-poc
  Treck Network Stack Discovery Tool by JSOF
  ☆33Updated 4 years ago
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 5 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 5 years ago
• p1r06u3 / phishing
  The Security Practices of Party A Phishing
  ☆19Updated 5 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆113Updated 7 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• KEDYY / SheepScanner
  分布式互联网开放端口与协议扫描
  ☆18Updated 8 years ago
• QiAnXinCodeSafe / Legendsec
  奇安信报开源软件漏洞cve所用目录。每个人报漏洞请建立自己的目录。
  ☆45Updated 5 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 5 years ago
• jvdroit / Suricata-rules
  ☆9Updated 8 years ago
• pandaof / ATT-CK-and-Atomic-Red-Team
  ☆11Updated 6 years ago
• 0xa-saline / Logpara
  一个对常见的web日志进行解析处理的粗糙DEMO
  ☆21Updated 6 years ago
• pyphrb / fuckCoreMail
  fuck
  ☆24Updated 9 years ago
• euphrat1ca / ICSwiki
  ICSwiki
  ☆26Updated 4 years ago
• MisakiKata / watchfile
  基于inotify的Linux文件实时监控程序，同时调用河马扫描来检测文件
  ☆22Updated 4 years ago
• Z-0ne / SCADA-Rules
  Snort rules
  ☆35Updated 6 years ago
• u2400 / libc_hook_demo
  一个HIDS agent端的demo
  ☆17Updated 5 years ago
• phantom0301 / PTEye
  Phantom eye——A passive business logic vulnerability auditing tool
  ☆55Updated 6 years ago
• migolovanov / libinjection-fuzzer
  This tool was written as PoC to article https://waf.ninja/libinjection-fuzz-to-bypass/
  ☆38Updated 7 years ago
• seecode-audit / clocwalk
  Project code and dependent component analysis tools.
  ☆2Updated last year
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• 360netlab / whoisdb
  The python client of 360 Netlab whois database
  ☆14Updated 6 years ago