jayjacobs / dgaLinks
Classifier to separate legitimate domains from those generated by a domain generating algorithm (DGA).
☆41Updated 8 years ago
Alternatives and similar repositories for dga
Users that are interested in dga are comparing it to the libraries listed below
Sorting:
- Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds☆175Updated 9 years ago
- AMICO - Accurate Behavior-Based Detection of Malware Downloads☆31Updated 7 years ago
- A series of labs that will help users apply various data science techniques to security related data.☆132Updated 10 years ago
- DNSDB query scripts☆75Updated 5 years ago
- ☆12Updated 8 years ago
- Sweet, sweet, secrepo.com html.☆132Updated 3 years ago
- Honeypot log processor to create OTX Pulse entries☆28Updated last year
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆96Updated 9 years ago
- A collection of "network intelligence" utilities for R. ASN info, IP reputation, etc.☆39Updated 11 years ago
- DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text fil…☆78Updated last year
- Detection of malware using dynamic behavior and Windows audit logs☆76Updated 10 years ago
- Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review☆197Updated 8 years ago
- ☆28Updated 8 years ago
- Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…☆148Updated 11 years ago
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20Updated 9 years ago
- Gather and compile open source threat intelligence feeds.☆40Updated 3 years ago
- Malware/IOC ingestion and processing engine☆106Updated 6 years ago
- OpenDNS Graph Miner☆45Updated 8 years ago
- SANS Hunting on the Cheap☆35Updated 9 years ago
- Threat Analysis, Reconnaissance, and Data Intelligence System☆125Updated 10 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- YETI is a TAXII implementation☆46Updated 6 years ago
- Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)☆159Updated 3 years ago
- Bro scripts to be shared with the community☆111Updated 12 years ago
- Debian and Red Hat packaging for SIE DNS sensor☆15Updated 2 years ago
- ☆28Updated 8 years ago
- DGA Domains detection☆67Updated 7 years ago
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago
- brostash: Linux distribution based on Debian and focusing on network security events collection☆34Updated 5 years ago
- Scumblr instructions with custom search providers for monitoring malicous content☆17Updated 7 years ago