Alternatives and similar repositories for hardenedlinux-zeek-scripts

Users that are interested in hardenedlinux-zeek-scripts are comparing it to the libraries listed below

• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 6 years ago
• Cisco-Talos / Re2Pcap
  ☆60Updated last year
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆97Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 6 years ago
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 5 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆115Updated 8 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆165Updated 6 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• baidu-security / webshell-scanner-client
  A golang client of our webshell scanner API
  ☆28Updated 7 years ago
• monsterzer0 / Cyber-Security-Guide
  The Whitepaper For Enterprise Security created by Monster Zero Team
  ☆36Updated 8 years ago
• pandaof / ATT-CK-and-Atomic-Red-Team
  ☆11Updated 7 months ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆40Updated 6 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 6 years ago
• kirillwow / ids_bypass
  IDS Bypass tricks
  ☆122Updated 7 years ago
• SPuerBRead / Docker-Remote-API-Exploit
  Docker-Remote-API-Exploit
  ☆31Updated 8 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆33Updated 5 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆29Updated 10 years ago
• 0xa-saline / acunetix-api
  acunetix
  ☆62Updated 5 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• knownsec / Minitools-bin_extractor
  A simple script for quickly mining sensitive information in binary files.
  ☆30Updated 5 years ago
• shubhamshubhankar / autoSource
  Automated SonarQube
  ☆70Updated 6 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• migolovanov / libinjection-fuzzer
  This tool was written as PoC to article https://waf.ninja/libinjection-fuzz-to-bypass/
  ☆39Updated 8 years ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆96Updated 7 years ago
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆52Updated 7 years ago
• MoYunSec / osfp-smb
  os fingerprint probe through smb
  ☆10Updated 4 years ago
• delvelabs / htcap
  htcap is a web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM c…
  ☆18Updated 4 months ago
• mavlevin / uTorrent-CVE-2020-8437
  Exploit for uTorrent vulnerability CVE-2020-8437 by mavlevin
  ☆11Updated this week