Alternatives and similar repositories for SANS-DFIR-2017

Users that are interested in SANS-DFIR-2017 are comparing it to the libraries listed below

• notx11 / urlScan2Hive
  Triage automation for suspect URLs
  ☆13Updated 6 years ago
• maltiverse / python-maltiverse
  API wrapper for Maltiverse
  ☆19Updated 11 months ago
• JustinAzoff / passive-dns
  dns logger for passive dns collection
  ☆42Updated 13 years ago
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆26Updated 3 years ago
• cudeso / tools
  Different tools, koen.vanimpe@cudeso.be
  ☆136Updated 2 months ago
• cmatthewbrooks / pyiocutils
  A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).
  ☆17Updated 6 years ago
• jaegeral / osint_to_timesketch
  Virustotal Data to Timesketch
  ☆17Updated 6 years ago
• 411Hall / obscurer
  Cowrie Honeypot Obscurer
  ☆17Updated 4 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Updated 3 years ago
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆29Updated 8 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 8 years ago
• certtools / intelmq-feeds-documentation
  Cyber Threat Intelligence Feeds
  ☆68Updated last year
• MISP / intelligence-icons
  intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; inclu…
  ☆41Updated 6 years ago
• adulau / misp-osint-collection
  Collection of best practices to add OSINT into MISP and/or MISP communities
  ☆66Updated last year
• jaegeral / osint-timelines
  Providing timelines based on OSINT Reports
  ☆32Updated 2 years ago
• active-threat-hunting / active-threat-hunting
  Tools for hunting security threats
  ☆12Updated 5 years ago
• WebBreacher / emailwhois
  Look up an email domain (@example.com), using Python, across all known domains.
  ☆45Updated 2 years ago
• joesecurity / Joe-Sandbox-Bro
  JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox
  ☆45Updated 6 years ago
• deadbits / Analyst-CaseFile
  Maltego CaseFile entities for information security investigations, malware analysis and incident response
  ☆66Updated 7 years ago
• ecstatic-nobel / Analyst-Arsenal
  A toolkit for Security Researchers
  ☆128Updated 6 years ago
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago
• LDO-CERT / FireEye2TH
  FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform
  ☆16Updated 6 years ago
• pwnlandia / hpfeeds-logger
  Small App for reading from MHN's hpfeeds broker and writing splunk logs
  ☆10Updated 5 years ago
• daveherrald / scansio-sonar-splunk
  Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…
  ☆19Updated 2 months ago
• 9b / netinfo
  Simple IP enrichment service and API wrapping PyASN and MaxMind GeoIP.
  ☆73Updated 2 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• MISP / misp-vagrant
  Deploy MISP Project software with Vagrant.
  ☆45Updated 5 years ago
• uforia / exitgather
  Tool for automatic list generation of known TOR and VPN exit nodes
  ☆29Updated last year
• Concinnity-Risks / LogisticalBudget
  This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…
  ☆35Updated 6 years ago
• shaanen / osint-combiner
  Combining OSINT sources in Elastic Stack
  ☆80Updated 4 years ago