patternex / awesome-ml-for-threat-detection

Related projects ⓘ

Alternatives and complementary repositories for awesome-ml-for-threat-detection

• nccgroup / JA3_outlier
  Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes
  ☆15Updated 2 years ago
• anubhavsaxena14 / Threat-Detection-using-Sentiment-Analysis
  Threat Detection System using Hybrid (Machine Learning + Lexical Analysis) learning Approach.
  ☆11Updated 7 years ago
• sans-blue-team / sec555-mdwiki-v1
  ☆11Updated 3 years ago
• ninoseki / phishing_kits_2021
  A dataset of phishing kits in the wild
  ☆15Updated 5 months ago
• randomuserid / Baltar
  Searches for Insider Threat Hunting
  ☆30Updated 5 years ago
• SCS-Labs / TheWatchList
  Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.
  ☆15Updated 3 years ago
• Cyb3rWard0g / infosec-well-done
  A few quick recipes for those that do not have much time during the day
  ☆21Updated 3 weeks ago
• lucky-luk3 / Infosec_Notebooks
  ☆21Updated last year
• cyentific-rni / SAG
  An elevated STIX representation of the MITRE ATT&CK Groups knowledge base
  ☆23Updated 2 years ago
• g-les / macho_similarity
  Conceptual Methods for Finding Commonalities in Macho Files
  ☆12Updated 8 months ago
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆14Updated 4 years ago
• curated-intel / attack-lookup
  A MITRE ATT&CK Lookup Tool
  ☆43Updated 6 months ago
• Cluster25 / detection
  Threat Detection Rules (Snort/Sigma/Yara)
  ☆13Updated 9 months ago
• Securityinbits / cheatsheet
  These are some of the commands which I use frequently during Malware Analysis and DFIR.
  ☆25Updated 10 months ago
• dhoelzer / DAD
  Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.
  ☆25Updated 8 years ago
• COSSAS / sacti
  SACTI - Securely aggregate CTI sightings and report them on MISP
  ☆13Updated 2 years ago
• ruppde / yara_rules
  Yara rules
  ☆20Updated last year
• swimlane / pyattck-data
  This repository contains generated contextual data utilized by pyattck.
  ☆17Updated 4 months ago
• TobySalusky / cont3xt
  Cont3xt intends to centralize and simplify a structured approach to gathering contextual intelligence in support of technical investigati…
  ☆36Updated 8 months ago
• chaitanyakrishna / IOCScraper
  IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.
  ☆34Updated 2 years ago
• jstnk9 / ETW-Almulahaza
  ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system
  ☆12Updated 2 years ago
• dgunter / ParseZeekLogs
  Utility for parsing Bro log files into CSV or JSON format
  ☆41Updated last year
• priamai / sigmatau
  An extension of the sigma standard to include security metrics.
  ☆15Updated last year
• Hestat / soc-threat-hunting
  Repo of python/bash scripts for identifying IoC's in threat feed and other online tools
  ☆26Updated 4 years ago
• automate-tim / conference-materials
  Speaking materials from conferences I've given
  ☆9Updated 2 years ago
• paulveillard / cybersecurity-threat-detection
  An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and vide…
  ☆37Updated 2 years ago
• blacklanternsecurity / sigma-rules
  A collection of Sigma rules organized by MITRE ATT&CK technique
  ☆16Updated 3 years ago
• aws-samples / drs-malware-scan
  Perform file-based malware scan on your on-prem servers with AWS
  ☆10Updated last year