jonticknor / ElasticPhishLinks
Proof-of-concept for phishing intelligence in Elastic
☆15Updated 6 years ago
Alternatives and similar repositories for ElasticPhish
Users that are interested in ElasticPhish are comparing it to the libraries listed below
Sorting:
- ☆25Updated 2 years ago
- Virustotal Data to Timesketch☆17Updated 6 years ago
- Check IOC provided by a MISP instance on Suricata events☆18Updated 6 years ago
- ☆22Updated 4 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Updated last year
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Triage automation for suspect URLs☆13Updated 6 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- HoneyDB Python Module☆13Updated last year
- Repository for scripts and tips for "Yara Scan Service"☆20Updated 2 years ago
- Script to pull newly-registered domains and check for similarity against a provided word list.☆13Updated 5 years ago
- Cybersecurity Incidents Mind Maps☆33Updated 3 years ago
- ☆14Updated 7 years ago
- The Fastest way to consume Threat Intel☆26Updated 3 years ago
- Prototype system to monitor BGP routes and alert when anomalies are identified☆15Updated 6 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Jupyter Notebooks and code used for DNS MX mining to identify top email security providers☆54Updated 2 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Updated 5 years ago
- Useful commands for infosec☆29Updated 2 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 6 years ago
- ☆12Updated 7 years ago
- Scripts to detect Fast-Flux and DGA using DNS query responses☆43Updated 8 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- A Passive DNS backend and collector☆31Updated 3 years ago
- repo for sharing stuff☆17Updated 2 months ago
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆21Updated 4 years ago
- s3eker is an extensible way to find open S3 buckets.☆17Updated 5 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆38Updated 7 months ago
- Tool for automatic list generation of known TOR and VPN exit nodes☆29Updated last year