Alternatives and similar repositories for HoneySMB

Users that are interested in HoneySMB are comparing it to the libraries listed below

• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 3 years ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated last year
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆110Updated 7 years ago
• JPCERTCC / DetectLM
  Detecting Lateral Movement with Machine Learning
  ☆139Updated 8 years ago
• neonprimetime / PhishingKitTracker
  PROJECT PAUSED 1/11/22, Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in …
  ☆101Updated 3 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆102Updated 3 years ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆158Updated 7 months ago
• la3ar0v / TuxResponse
  Linux Incident Response
  ☆90Updated 6 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆96Updated 7 years ago
• csirtgadgets / verbose-robot
  The Fastest way to consume Threat Intel
  ☆26Updated 3 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 4 months ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆258Updated 2 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆241Updated 4 years ago
• hxnoyd / ossem-power-up
  A tool to assess data quality, built on top of the awesome OSSEM.
  ☆79Updated 3 years ago
• GreyNoise-Intelligence / GNQL
  GreyNoise Query Language
  ☆82Updated 6 years ago
• PacketTotal / HoneyBot
  Capture, upload and analyze network traffic; powered by PacketTotal.com.
  ☆97Updated 5 years ago
• ecstatic-nobel / Analyst-Arsenal
  A toolkit for Security Researchers
  ☆128Updated 6 years ago
• MISP / misp-dashboard
  A live dashboard for a real-time overview of threat intelligence from MISP instances
  ☆204Updated 2 years ago
• InQuest / sandboxapi
  Minimal, consistent Python API for building integrations with malware sandboxes.
  ☆141Updated last year
• fugawi / mate
  Mitre Att&ck Technique Emulation
  ☆82Updated 6 years ago
• xenoscr / atomiccaldera
  A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…
  ☆73Updated 4 years ago
• dgunter / evtxtoelk
  A lightweight tool to load Windows Event Log evtx files into Elasticsearch.
  ☆119Updated 5 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 4 years ago
• yarox24 / attack_monitor
  Endpoint detection & Malware analysis software
  ☆230Updated 5 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆108Updated 4 years ago
• Hestat / lw-yara
  Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies
  ☆105Updated 4 years ago
• passivetotal / python_api
  Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
  ☆85Updated 2 years ago
• d3vzer0 / reternal-quickstart
  Repo containing docker-compose files and setup scripts without having to clone the individual reternal components
  ☆112Updated 4 years ago
• tylabs / dovehawk
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Updated 4 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆68Updated 5 years ago