kulinacs / cowrie-attackLinks
Mapping the ATT&CK matrix in a Cowrie honeypot
☆16Updated 7 years ago
Alternatives and similar repositories for cowrie-attack
Users that are interested in cowrie-attack are comparing it to the libraries listed below
Sorting:
- Deploy MISP Project software with Vagrant.☆45Updated 5 years ago
- Universal Honey Pot☆29Updated 5 months ago
- The plugin repository for Honeycomb, the honeypot framework by Cymmetria☆27Updated 2 years ago
- Check IOC provided by a MISP instance on Suricata events☆18Updated 6 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆40Updated last year
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆49Updated 2 months ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Updated 7 years ago
- pollen - A command-line tool for interacting with TheHive☆36Updated 6 years ago
- Tool for automatic list generation of known TOR and VPN exit nodes☆29Updated 2 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆22Updated 8 years ago
- PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and ser…☆56Updated last year
- ☆52Updated 7 years ago
- Honeypot log processor to create OTX Pulse entries☆28Updated 2 years ago
- References for FIRST CTI 2019 Symposium presentation☆23Updated 6 years ago
- Jupyter Notebooks and code used for DNS MX mining to identify top email security providers☆57Updated 2 years ago
- Home to the ActorTrackr source code☆24Updated 8 years ago
- Bluehat 2018 Graphs for Security Workshop☆42Updated 7 years ago
- Materials for the BSides NoVA/Charleston 2018 Bro Workshop☆14Updated 7 months ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 5 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆35Updated 6 years ago
- A collection of typical false positive indicators☆56Updated 5 years ago
- Simple Docker Honeypot server emulating small snippets of the Docker HTTP API☆33Updated 5 years ago
- A tool to catch spoofed NBNS responses.☆51Updated 7 years ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19Updated 8 years ago
- Credential Phish Analysis and Automation☆98Updated 7 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆17Updated 9 years ago
- Nmap Script to scan for Winnti infections☆71Updated 7 years ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆15Updated 6 years ago
- Things to know when DFIR occurs near a vault deployment.☆44Updated 7 years ago