Alternatives and similar repositories for nsrlsvr:

Users that are interested in nsrlsvr are comparing it to the libraries listed below

• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆112Updated 3 years ago
• boolaz / BooLet
  Log Examination Tool
  ☆26Updated 8 years ago
• devgc / EventMonkey
  A Windows Event Processing Utility
  ☆46Updated 6 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆36Updated 4 years ago
• dlcowen / dfirwizard
  Example programs used in the automating DFIR series
  ☆64Updated 5 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 4 years ago
• sans-blue-team / NSM
  This repository is created to add value to existing Network Security Monitoring solutions.
  ☆42Updated 8 years ago
• certsocietegenerale / fame_modules
  Community modules for FAME
  ☆65Updated 2 weeks ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated last year
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 4 years ago
• att / docker-forensics
  Tools to assist in forensicating docker
  ☆81Updated this week
• maurermj08 / efetch
  Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.
  ☆37Updated 4 years ago
• CrowdStrike / CrowdFMS
  CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by lever…
  ☆129Updated 6 years ago
• aboutsecurity / Talks-and-Presentations
  Slides and Other Resources from my latest Talks and Presentations
  ☆24Updated 4 years ago
• xme / mime2vt
  Unpack MIME attachments from a file and check them against virustotal.com
  ☆45Updated 8 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆105Updated 6 years ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆36Updated 6 months ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• wmetcalf / buildcuckoo-trusty
  A dumb set of scripts for building a cuckoo rig
  ☆61Updated 7 years ago
• csababarta / volatility_plugins
  Volatility plugins created by the author
  ☆44Updated 9 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆62Updated 9 years ago
• crits / pycrits
  Python interface to the CRITs API
  ☆22Updated 7 years ago
• msuhanov / yarp
  Yet another registry parser
  ☆130Updated 2 years ago
• MISP / misp-workbench
  MISP Workbench
  ☆28Updated 8 years ago
• TakahiroHaruyama / openioc_scan
  openioc_scan Volatility Framework plugin
  ☆42Updated 8 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆74Updated 11 years ago
• devgc / SrumMonkey
  Tool to parse SRU database
  ☆24Updated 6 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆51Updated last month