Alternatives and similar repositories for dataShark

Users that are interested in dataShark are comparing it to the libraries listed below

• adulau / DomainClassifier
  DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text fil…
  ☆79Updated last year
• securityclippy / elasticintel
  Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
  ☆141Updated 2 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 7 years ago
• adulau / MalwareClassifier
  Malware Classifier From Network Captures
  ☆82Updated 8 years ago
• Yelp / amira
  AMIRA: Automated Malware Incident Response & Analysis
  ☆151Updated last month
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 7 years ago
• mitre / caret
  CARET - A tool for viewing cyber analytic relationships
  ☆55Updated 5 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 6 years ago
• midnightslacker / threat_intel
  Gather and compile open source threat intelligence feeds.
  ☆40Updated 3 years ago
• rocknsm / rock-scripts
  Bro scripts for the ROCK platform. http://rocknsm.io
  ☆34Updated 2 years ago
• cybermaggedon / cyberprobe
  Capturing, analysing and responding to cyber attacks
  ☆171Updated last year
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆87Updated 6 years ago
• opendns / pyinvestigate
  Python module to interface with the OpenDNS Investigate API
  ☆64Updated 3 years ago
• tatsuiman / rpot2
  Real-time Packet Observation Tool
  ☆39Updated 2 years ago
• CIRCL / compliance
  Legal, procedural and policies document templates for operating an IRT
  ☆64Updated last year
• silascutler / MalPipe
  Malware/IOC ingestion and processing engine
  ☆107Updated 6 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆251Updated last year
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated 2 years ago
• eSentire / malfeed
  Feed for verious malicious IPs such as malware and botnets
  ☆12Updated 9 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆125Updated 10 years ago
• certtools / intelmq-feeds-documentation
  Cyber Threat Intelligence Feeds
  ☆69Updated last year
• abusesa / abusehelper
  A framework for receiving and redistributing abuse feeds
  ☆124Updated 6 years ago
• TAXIIProject / yeti
  YETI is a TAXII implementation
  ☆46Updated 6 years ago
• Plazmaz / MongoDB-HoneyProxy
  A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.
  ☆92Updated 2 years ago
• automayt / FlowPlotter
  Generates visualizations from the output of flow tools such as SiLK.
  ☆35Updated 8 years ago
• Schillings / SwordPhish
  Schillings SwordPhish empowers organisations and engages its employees to establish the key component of any cyber security strategy: th…
  ☆107Updated 7 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• packetloop / packetpig
  Packetpig - Open Source Big Data Security Analytics
  ☆298Updated 7 years ago
• xme / toolbox
  Miscelaneous useful scripts for my day to day projects
  ☆124Updated 5 years ago
• simplerisk / code
  The currently released SimpleRisk source code.
  ☆98Updated 2 months ago