Alternatives and similar repositories for SANS-DFIR-2017:

Users that are interested in SANS-DFIR-2017 are comparing it to the libraries listed below

• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆28Updated 7 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆52Updated 3 years ago
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆25Updated 2 years ago
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago
• daveherrald / scansio-sonar-splunk
  Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…
  ☆19Updated 2 months ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• 411Hall / obscurer
  Cowrie Honeypot Obscurer
  ☆17Updated 4 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• michael-yip / ThreatTracker
  ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…
  ☆68Updated 10 years ago
• pwnlandia / hpfeeds-logger
  Small App for reading from MHN's hpfeeds broker and writing splunk logs
  ☆10Updated 5 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• wolfpack1 / intel_collection_tools
  ☆22Updated 7 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆44Updated 5 years ago
• AlienVault-OTX / ThreatCrowd-Maltego
  Maltego transforms for the ThreatCrowd search API
  ☆49Updated 7 years ago
• mdegrazia / OnionPeeler
  Python script to batch query the Tor Relays and Bridges
  ☆36Updated 6 years ago
• Neo23x0 / space-id
  Invisible Watermarks with Space Characters in ASCII Files
  ☆21Updated 6 years ago
• hslatman / awesome-security
  A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
  ☆25Updated 8 years ago
• eCrimeLabs / phish2MISP
  Easy way to create a MISP event related to a Phishing page
  ☆17Updated last year
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 6 years ago
• maltiverse / python-maltiverse
  API wrapper for Maltiverse
  ☆18Updated 6 months ago
• jpyorre / IntelligentHoneyNet
  The Intelligent Honey Net Project attempts to create actionable information from honeypots
  ☆62Updated 9 years ago
• truekonrads / kpulp
  Konrads' Pen-Ultimate (Windows) Log File Parser
  ☆13Updated 2 years ago
• binorassocies / brostash
  brostash: Linux distribution based on Debian and focusing on network security events collection
  ☆34Updated 4 years ago
• certtools / intelmq-feeds-documentation
  Cyber Threat Intelligence Feeds
  ☆67Updated 11 months ago
• Stahlz / CertWatcher
  CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report …
  ☆11Updated 4 years ago
• josehelps / blackcert
  Blackcert monitors Certificate Transparency Logs for a keyword. Blackcert collects any certificate changes for this keyword and also chec…
  ☆9Updated 2 years ago
• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 9 years ago
• shaanen / osint-combiner
  Combining OSINT sources in Elastic Stack
  ☆80Updated 4 years ago
• GoSecure / freshonions-torscraper
  Fresh Onions is an open source TOR spider / hidden service onion crawler
  ☆79Updated 5 years ago
• bostonlink / bitcoin-explorer
  Maltego local transform that parses the Bitcoin Blockchain (blockexplorer.com) and creates Maltego graphs based on bitcoin wallet address…
  ☆38Updated 10 years ago