Alternatives and similar repositories for SANS-DFIR-2017

Users that are interested in SANS-DFIR-2017 are comparing it to the libraries listed below

• notx11 / urlScan2Hive
  Triage automation for suspect URLs
  ☆13Updated 5 years ago
• weslambert / securityonion-strelka
  ☆13Updated 5 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆45Updated 6 years ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• MISP / misp-vagrant
  Deploy MISP Project software with Vagrant.
  ☆43Updated 5 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 8 years ago
• clong / vagrant-ids
  An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk
  ☆23Updated 7 years ago
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆26Updated 3 years ago
• UNIT777 / Email2TheHive
  This package allows for creating alerts in The Hive from emails retrieved from a Microsoft Exchange mailbox.
  ☆12Updated 8 years ago
• target / attack-navigator-docker
  A simple Docker container that serves the MITRE ATT&CK Navigator web app
  ☆27Updated 2 years ago
• jaegeral / osint_to_timesketch
  Virustotal Data to Timesketch
  ☆17Updated 6 years ago
• AlienVault-OTX / ThreatCrowd-Maltego
  Maltego transforms for the ThreatCrowd search API
  ☆49Updated 7 years ago
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆29Updated 7 years ago
• cudeso / tools
  Different tools, koen.vanimpe@cudeso.be
  ☆133Updated 2 weeks ago
• hslatman / awesome-security
  A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
  ☆25Updated 8 years ago
• pwnlandia / hpfeeds-logger
  Small App for reading from MHN's hpfeeds broker and writing splunk logs
  ☆10Updated 5 years ago
• kranzrm / PhantomShodan
  Shodan.io connector for Phantom Cyber Security Orchestration
  ☆22Updated 8 years ago
• maltiverse / python-maltiverse
  API wrapper for Maltiverse
  ☆18Updated 9 months ago
• armedpot / honeytrap
  Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
  ☆43Updated 3 years ago
• adulau / misp-osint-collection
  Collection of best practices to add OSINT into MISP and/or MISP communities
  ☆66Updated last year
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago
• active-threat-hunting / active-threat-hunting
  Tools for hunting security threats
  ☆12Updated 5 years ago
• jpyorre / IntelligentHoneyNet
  The Intelligent Honey Net Project attempts to create actionable information from honeypots
  ☆62Updated 9 years ago
• Te-k / commands-for-sec
  Useful commands for infosec
  ☆29Updated 2 years ago
• activeshadow / maltego-nmap
  A few transforms and a machine for parsing Nmap XML results
  ☆38Updated 9 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 6 years ago
• fireeye / brocapi
  Bro PCAP Processing and Tagging API
  ☆28Updated 7 years ago
• Concinnity-Risks / LogisticalBudget
  This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…
  ☆35Updated 6 years ago
• markedoe / cuckoo-sandbox
  cuckoo sandbox patches and scripts
  ☆15Updated 11 years ago
• ecstatic-nobel / Analyst-Arsenal
  A toolkit for Security Researchers
  ☆127Updated 5 years ago