Alternatives and similar repositories for siemcraft

Users that are interested in siemcraft are comparing it to the libraries listed below

• mttaggart / wtfbins
  WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.
  ☆166Updated 9 months ago
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆66Updated 3 years ago
• Nirusu / how-to-setup-a-honeypot
  How to setup a honeypot with an IDS, ELK and TLS traffic inspection
  ☆164Updated 3 years ago
• cado-security / varc
  Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…
  ☆255Updated last year
• Neo23x0 / god-mode-rules
  God Mode Detection Rules
  ☆134Updated last year
• adobe / libLOL
  ☆50Updated 5 months ago
• swimlane / atomic-operator
  A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.
  ☆137Updated last year
• Defenders-Guide / TheDefendersGuide
  The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson
  ☆159Updated 2 years ago
• cado-security / rip_raw
  Rip Raw is a small tool to analyse the memory of compromised Linux systems.
  ☆133Updated 3 years ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆265Updated 2 years ago
• JPCERTCC / MemoryForensic-on-Cloud
  Memory Forensic System on Cloud
  ☆92Updated 2 years ago
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆122Updated 2 years ago
• Cyb3r-Monk / RITA-J
  Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.
  ☆208Updated 3 years ago
• splunk / salo
  Synthetic Adversarial Log Objects: A Framework for synthentic log generation
  ☆85Updated 2 years ago
• blacklotuslabs / IOCs
  IOCs published by Black Lotus Labs
  ☆124Updated 2 months ago
• cisagov / parsnip
  ☆74Updated 3 months ago
• olafhartong / MDE-AuditCheck
  MDE relies on some of the Audit settings to be enabled
  ☆100Updated 3 years ago
• grahamhelton / SansTerminalIndexer
  Easily create index of your SANS books
  ☆19Updated 3 years ago
• AbdulRhmanAlfaifi / Fennec
  Artifact collection tool for *nix systems
  ☆212Updated last year
• calebstewart / python-sigma
  Python API for interacting with sigma rules.
  ☆55Updated 3 years ago
• WithSecureLabs / detectree
  Data visualization for blue teams
  ☆127Updated 2 years ago
• jklepsercyber / defender-detectionhistory-parser
  A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
  ☆114Updated 3 years ago
• 0x706972686f / RMM-Catalogue
  ☆105Updated 6 months ago
• Neo23x0 / LOLSecIssues
  Cybersecurity's lighter side: a collection of the most amusing misunderstandings and missteps from newcomers to offensive security tools.…
  ☆58Updated 2 years ago
• OTRF / OSSEM-DD
  OSSEM Data Dictionaries
  ☆65Updated 11 months ago
• hashlookup / hashlookup-forensic-analyser
  Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…
  ☆128Updated 2 years ago
• PayloadSecurity / Sandbox_Scryer
  ☆226Updated 3 years ago
• huntresslabs / threat-intel
  This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
  ☆44Updated this week
• mandiant / thiri-notebook
  The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat huntin…
  ☆154Updated 3 years ago
• malwarejake-public / conference-presentations
  Conference presentations
  ☆60Updated 2 months ago