Alternatives and similar repositories for hostintel

Users that are interested in hostintel are comparing it to the libraries listed below

• cylance / CyBot
  Open Source Threat Intelligence Chat Bot
  ☆323Updated 5 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆548Updated 2 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆533Updated last year
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆154Updated 3 months ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆281Updated 2 years ago
• SekoiaLab / Fastir_Collector_Linux
  ☆174Updated 4 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆243Updated 7 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• Ptr32Void / OSTrICa
  ☆306Updated 8 years ago
• AlienVault-OTX / ApiV2
  Version 2 of the ThreatCrowd API
  ☆271Updated 2 years ago
• mandiant / ioc_writer
  ☆205Updated 2 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆389Updated 6 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• GreyNoise-Intelligence / api.greynoise.io
  Code + documentation for the public GreyNoise API
  ☆314Updated 4 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆122Updated 4 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆271Updated last year
• syphon1c / Threatelligence
  Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…
  ☆148Updated 11 years ago
• diogo-fernan / ir-rescue
  A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
  ☆485Updated 4 years ago
• opensourcesec / Forager
  Multithreaded threat Intelligence gathering built with Python3
  ☆176Updated 7 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆257Updated 2 years ago
• MISP / misp-dashboard
  A live dashboard for a real-time overview of threat intelligence from MISP instances
  ☆203Updated 2 years ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆289Updated 7 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆102Updated 5 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆209Updated 5 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• diogo-fernan / malsub
  A Python RESTful API framework for online malware analysis and threat intelligence services.
  ☆369Updated last year
• bhdresh / Dejavu
  DejaVU - Open Source Deception Framework
  ☆415Updated 2 months ago