Alternatives and similar repositories for hostintel:

Users that are interested in hostintel are comparing it to the libraries listed below

• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆540Updated last year
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆381Updated 5 years ago
• cylance / CyBot
  Open Source Threat Intelligence Chat Bot
  ☆319Updated 4 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆427Updated last year
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆366Updated 5 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆507Updated 8 months ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆149Updated 8 months ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 7 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆119Updated 4 years ago
• QTek / QRadio
  QRadio ~ Best Threat Intelligence Radio ~ Tune In!
  ☆96Updated 8 years ago
• Ptr32Void / OSTrICa
  ☆309Updated 7 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆379Updated 2 months ago
• 0x4D31 / deception-as-detection
  Deception based detection techniques mapped to the MITRE’s ATT&CK framework
  ☆288Updated 7 years ago
• mandiant / ioc_writer
  ☆201Updated last year
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆240Updated 3 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆275Updated last year
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆336Updated 8 months ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆241Updated 6 years ago
• 401trg / detections
  This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant ya…
  ☆121Updated 3 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆252Updated last year
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆204Updated 4 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• ecstatic-nobel / OSweep
  Don't Just Search OSINT. Sweep It.
  ☆311Updated 4 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆271Updated 8 months ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆100Updated 4 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆464Updated 6 years ago
• PUNCH-Cyber / YaraGuardian
  Django web interface for managing Yara rules
  ☆190Updated 6 years ago
• MISP / misp-dashboard
  A live dashboard for a real-time overview of threat intelligence from MISP instances
  ☆195Updated last year