morphuslabs / distinct
Find potential Indicators of Compromise among similar Linux servers
☆29Updated 7 years ago
Alternatives and similar repositories for distinct:
Users that are interested in distinct are comparing it to the libraries listed below
- Security Onion Elastic Stack☆46Updated 4 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆21Updated 7 years ago
- Clustering NMAP XML results to help make sense of large scan results.☆33Updated 2 years ago
- ☆30Updated 6 years ago
- Materials from my Circle City Con talk: Fantastic OSINT (and where to find it)☆23Updated 8 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- A bunch of scripts I use to work with urlscan.io☆34Updated 5 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Updated 6 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- Useful Powershell modules.☆11Updated 8 years ago
- BTG's purpose is to make fast and efficient search on IOC☆70Updated 6 years ago
- Harbinger Threat Intelligence☆82Updated 9 years ago
- A tool to catch spoofed NBNS responses.☆50Updated 6 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆38Updated 6 months ago
- Handy scripts developed and discussed on http://auditcasts.com☆19Updated 5 years ago
- Sysmon configuration file template with default high-quality event tracing☆17Updated 3 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- ☆61Updated 7 years ago
- The Unofficial Burp Extension for DNSDumpster.com☆70Updated 7 years ago
- Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…☆19Updated 2 months ago
- Use DNS to hunt for threats including DGAs☆15Updated 9 years ago
- first commit☆20Updated last year
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 7 years ago
- Repository for Endpoint Security Testing☆35Updated 6 years ago
- Randori: Like Aiki. With a couple of Dans under its belt.☆14Updated 7 years ago
- Lutech TMS EHAT-NG☆14Updated 7 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- Identify compromised domains or emails. A python based HIBP and HackedEmails wrapper☆38Updated 6 years ago
- Honeypot log processor to create OTX Pulse entries☆28Updated last year
- A collection of scripts that I've written while pentesting.☆31Updated 6 years ago