Alternatives and similar repositories for awesome-endpoint-detection-and-response

Users that are interested in awesome-endpoint-detection-and-response are comparing it to the libraries listed below

• viper-framework / viper2
  File analysis and management framework.
  ☆90Updated 2 years ago
• intelowlproject / GreedyBear
  Threat Intel Platform for T-POTs
  ☆157Updated this week
• WithSecureLabs / detectree
  Data visualization for blue teams
  ☆126Updated 2 years ago
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆94Updated 3 years ago
• telekom-security / malware_analysis
  This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.
  ☆118Updated last year
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆65Updated 3 years ago
• tylabs / quicksand
  QuickSand document and PDF malware analysis tool written in Python
  ☆135Updated 3 weeks ago
• BushidoUK / Exploring-APT-campaigns
  Further investigation in to APT campaigns disclosed by private security firms and security agencies
  ☆87Updated 3 years ago
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆153Updated 6 months ago
• misje / opencti-wazuh-connector
  OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings
  ☆22Updated last year
• PayloadSecurity / Sandbox_Scryer
  ☆226Updated 3 years ago
• vuldb / cyber_threat_intelligence
  Cyber Threat Intelligence Data, Indicators, and Analysis
  ☆101Updated last month
• d4rk-d4nph3 / Ransomware-Reports
  This repo is a collection of Ransomware reports from vendors, researchers, etc.
  ☆119Updated 3 years ago
• sandflysecurity / sandfly-entropyscan
  Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives …
  ☆167Updated last year
• StevenD33 / Lab-DFIR-SOC
  ☆70Updated 4 years ago
• alt3kx / wafaray
  Enhance your malware detection with WAF + YARA (WAFARAY)
  ☆109Updated 3 years ago
• iomoath / yara-scanner
  YaraScanner is a file pattern-matching tool based on YARA rules.
  ☆59Updated 2 years ago
• mitre / engage
  MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
  ☆67Updated last year
• NextronSystems / thor-lite
  Fast IOC and YARA Scanner
  ☆84Updated 5 years ago
• claroty / arya
  Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA.
  ☆257Updated 2 years ago
• archcloudlabs / BSidesRoc2022_Linux_Malware_Analysis_Course
  BSidesRoc 2022 Linux Malware/Forensics Course
  ☆77Updated 3 years ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆78Updated 2 years ago
• fkie-cad / socbed
  A Self-Contained Open-Source Cyberattack Experimentation Testbed
  ☆43Updated 5 months ago
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆106Updated 3 years ago
• Nirusu / how-to-setup-a-honeypot
  How to setup a honeypot with an IDS, ELK and TLS traffic inspection
  ☆163Updated 3 years ago
• microsoft / MSTIC-Sysmon
  Anything Sysmon related from the MSTIC R&D team
  ☆155Updated last year
• SimoneCagol / sigma-rules-crawler
  ☆33Updated last month
• blacklotuslabs / IOCs
  IOCs published by Black Lotus Labs
  ☆124Updated 3 weeks ago
• abusech / ThreatFox
  Open IOC sharing platform
  ☆61Updated last year
• malpedia / signator-rules
  Collection of rules created using YARA-Signator over Malpedia
  ☆141Updated last year