salesforce / jarmLinks
☆1,263Updated 2 years ago
Alternatives and similar repositories for jarm
Users that are interested in jarm are comparing it to the libraries listed below
Sorting:
- JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.☆3,007Updated 5 months ago
- Warning lists to inform users of MISP about potential false-positives or other information in indicators☆587Updated 3 weeks ago
- Fast Application Layer Scanner☆1,968Updated 2 weeks ago
- HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…☆540Updated 5 months ago
- Guidance for mitigation web shells. #nsacyber☆981Updated 2 years ago
- A utility to safely generate malicious network traffic patterns and evaluate controls.☆1,331Updated last year
- Data exfiltration over DNS request covert channel☆871Updated last year
- Python library for connecting to CertStream☆460Updated last year
- Elastic Security detection content for Endpoint☆1,300Updated 2 weeks ago
- Open Source EDR for Windows☆1,275Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,241Updated this week
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,511Updated last year
- YARA signature and IOC database for my scanners and tools☆2,758Updated last week
- Automatically created C2 Feeds☆647Updated this week
- A list of cyber-chef recipes and curated links☆2,137Updated last year
- AIL framework - Analysis Information Leak framework☆798Updated last week
- Extract and aggregate threat intelligence.☆882Updated last year
- An Active Defense and EDR software to empower Blue Teams☆1,305Updated 2 years ago
- Defences against Cobalt Strike☆1,290Updated 3 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆607Updated last year
- VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities a…☆1,516Updated last week
- RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact☆1,727Updated 2 months ago
- APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the …☆1,376Updated 11 months ago
- FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network …☆674Updated last year
- Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise☆686Updated 2 years ago
- Detect Tactics, Techniques & Combat Threats☆2,207Updated 2 months ago
- Interesting APT Report Collection And Some Special IOCs☆2,682Updated last week
- Suricata, Snort and Zeek IDS rule and pcap testing system☆498Updated 3 weeks ago
- Threat Intel IoCs + bits and pieces of dark matter☆418Updated 4 months ago
- A collection of red team and adversary emulation resources developed and released by MITRE.☆520Updated 4 years ago