savon-noir / malfeeds
Python library for managing malware feeds and blacklists published online by third parties.
☆10Updated 9 years ago
Alternatives and similar repositories for malfeeds:
Users that are interested in malfeeds are comparing it to the libraries listed below
- Mitre chopshop network decoder framework☆30Updated 8 years ago
- Passive DNS V2☆62Updated 10 years ago
- Cyber Intel Management☆48Updated 7 years ago
- ☆22Updated 7 years ago
- Top DNS Measurement for Bro☆11Updated 4 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 9 years ago
- A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.☆66Updated 6 years ago
- Megatron - A System for Abuse- and Incident Handling☆42Updated 7 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- Small App for reading from MHN's hpfeeds broker and writing splunk logs☆10Updated 5 years ago
- A tool to generate Snort rules based on public IP reputation data☆56Updated 11 years ago
- Yara rules☆47Updated 11 years ago
- integrating bro into yara☆33Updated 10 years ago
- A simple Nessus results viewer☆49Updated 11 years ago
- Transfer Kippo data to ElasticSearch☆18Updated 9 years ago
- NTP logger/honeypot☆53Updated 10 years ago
- Exfiltration Framework - Exfiltration modeling tool written in Python. Naisho attempts to avoid detection from DLP, IPS/IDS egress filter…☆38Updated 10 years ago
- Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)☆30Updated 10 years ago
- Detect malicious domain, Blablablablabla☆26Updated 8 years ago
- Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…☆49Updated 7 years ago
- Cli interface to threatcrowd.org☆19Updated 7 years ago
- Prometheus Firewall Analyzer☆47Updated 9 years ago
- Various public documents, whitepapers and articles about APT campaigns☆54Updated 8 years ago
- Basic Maltego Transforms for looking up SSL certs and IP info from censys.io☆41Updated 7 years ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19Updated 7 years ago
- Manage VT Alerts☆62Updated 8 years ago
- Yara intergrated into BurpSuite☆46Updated 8 years ago
- Scripts to detect Fast-Flux and DGA using DNS query responses☆42Updated 7 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Updated 10 years ago
- A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices☆61Updated 9 years ago