Alternatives and similar repositories for Malcolm-PCAP:

Users that are interested in Malcolm-PCAP are comparing it to the libraries listed below

• Cluster25 / detection
  Threat Detection Rules (Snort/Sigma/Yara)
  ☆13Updated last year
• corelight / zeek2es
  A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…
  ☆35Updated 2 years ago
• dgunter / ParseZeekLogs
  Utility for parsing Bro log files into CSV or JSON format
  ☆41Updated 2 years ago
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆27Updated 4 years ago
• cutaway-security / cutsec_presentations
  Presentation Slides and Resources
  ☆15Updated 9 months ago
• cyentific-rni / SAG
  An elevated STIX representation of the MITRE ATT&CK Groups knowledge base
  ☆23Updated 2 years ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆29Updated last year
• micrictor / spl-spt
  Zeek plugin to generate data on per-packet sizes and intervals
  ☆14Updated 4 years ago
• otoriocyber / CIMPLICITY-Hardening-Tool
  PowerShell script for hardening GE digital CIMPLICITY servers
  ☆23Updated 3 years ago
• alwashmi / MasterParser
  MasterParser is a simple, all-in-one, digital forensics artifact parser
  ☆23Updated 3 years ago
• sebdraven / IOCmite
  Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
  ☆36Updated 2 years ago
• opencybersecurityalliance / oca-iob
  Augmentation to Machine Readable CTI
  ☆30Updated 2 weeks ago
• MISP / SkillAegis
  SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…
  ☆26Updated 2 weeks ago
• DhaeyerWolf / ICS-OT_wireshark_profiles
  ICS/OT related Wireshark profiles + adding some other (IT or OT related) Open Source Wireshark Profiles
  ☆17Updated last week
• theparanoids / rdfp
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆39Updated last year
• corelight / cve-2021-44228
  Log4j Exploit Detection Logic for Zeek
  ☆19Updated 10 months ago
• fatemabw / kyd
  DHCP Fingerprinting
  ☆28Updated 4 years ago
• accidentalrebel / mbcscan
  Scans a malware file and lists down the related MBC (Malware Behavior Catalog) details.
  ☆22Updated 2 years ago
• cudeso / dfir-iris-misp-timesketch
  Scripts to integrate DFIR-IRIS, MISP and TimeSketch
  ☆34Updated 3 years ago
• cyentific-rni / security-playbook-stix-misp-exchange
  This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…
  ☆16Updated 2 years ago
• CyCat-project / cycat-taxonomy
  CyCAT.org taxonomies
  ☆14Updated 3 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆51Updated 2 months ago
• WithSecureLabs / tau-engine
  A document tagging library
  ☆29Updated last week
• 3CORESec / Automata
  Automatic detection engineering technical state compliance
  ☆55Updated 8 months ago
• hpthreatresearch / iocs
  Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.
  ☆29Updated 11 months ago
• vertexproject / synapse-quickstart
  Get started using Synapse Open-Source to start a Cortex and perform analysis within your area of expertise.
  ☆41Updated 2 years ago
• MDudek-ICS / awesome-industrial-control-system-security
  A curated list of resources related to Industrial Control System (ICS) security.
  ☆21Updated 3 years ago
• The-DFIR-Report / Suricata-Rules
  ☆10Updated last year
• Yara-Rules / YaraRET
  Carving tool based in Radare2 & Yara
  ☆15Updated 6 years ago
• imp0rtp3 / js-yara-rules
  Yara rules for malicious javascript files from public repositories or written by me.
  ☆12Updated 3 years ago