Alternatives and similar repositories for mhn:

Users that are interested in mhn are comparing it to the libraries listed below

• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,086Updated 3 years ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,690Updated 9 months ago
• DinoTools / dionaea
  Home of the dionaea honeypot
  ☆734Updated 7 months ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,511Updated 8 months ago
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,490Updated 3 months ago
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,821Updated this week
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆4,851Updated last week
• BinaryDefense / artillery
  The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
  ☆1,016Updated 3 years ago
• certsocietegenerale / FIR
  Fast Incident Response
  ☆1,824Updated this week
• MISP / MISP
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  ☆5,570Updated this week
• ThreatHuntingProject / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆1,758Updated 3 years ago
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,243Updated last year
• tomchop / malcom
  Malcom - Malware Communications Analyzer
  ☆1,157Updated 7 years ago
• ossec / ossec-hids
  OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, roo…
  ☆4,642Updated last month
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,619Updated 2 years ago
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆6,705Updated this week
• mozilla / MozDef
  DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
  ☆2,167Updated 3 years ago
• outflanknl / RedELK
  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…
  ☆2,429Updated last month
• Neo23x0 / yarGen
  yarGen is a generator for YARA rules
  ☆1,611Updated 9 months ago
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,139Updated this week
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,516Updated 7 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,871Updated last month
• NextronSystems / APTSimulator
  A toolset to make a system look as if it was the victim of an APT attack
  ☆2,531Updated last year
• TheHive-Project / TheHive
  TheHive: a Scalable, Open Source and Free Security Incident Response Platform
  ☆3,571Updated 2 years ago
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,850Updated 8 months ago
• aptnotes / data
  APTnotes data
  ☆1,683Updated 2 months ago
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,566Updated last week
• arkime / arkime
  Arkime is an open source, large scale, full packet capturing, indexing, and database system.
  ☆6,539Updated this week
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,713Updated last month
• viper-framework / viper
  Binary analysis and management framework
  ☆1,542Updated last year