Alternatives and similar repositories for BotFlex:

Users that are interested in BotFlex are comparing it to the libraries listed below

• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆47Updated 10 years ago
• criticalstack / bro-scripts
  ☆72Updated 3 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 10 years ago
• fox-it / bro-scripts
  Bro-IDS scripts
  ☆50Updated 8 years ago
• PaloAltoNetworks / report_to_misp
  Parse a report and import the events into MISP
  ☆28Updated 9 years ago
• anthonykasza / scratch_pad
  Bro Snippets
  ☆21Updated 10 years ago
• sethhall / zeek-junk-drawer
  Zeek Junk Drawer - Just some scripts and a place to put them
  ☆27Updated 4 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆76Updated 9 years ago
• MITRECND / yaraprocessor
  Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.
  ☆97Updated 10 years ago
• sooshie / bro-scripts
  Various Bro scripts
  ☆96Updated 8 years ago
• sethhall / bro-scripts
  Various Bro scripts
  ☆38Updated 10 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 4 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆73Updated 11 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 6 years ago
• kx499-zz / ostip
  ☆28Updated 7 years ago
• ministryofpromise / tlp
  threat language parser
  ☆61Updated 9 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆52Updated 3 years ago
• LiamRandall / BroMalware-Exercise
  ☆85Updated 11 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆47Updated 6 years ago
• zeek / bro-plugins
  (OBSOLETE) Plugins for Bro
  ☆53Updated 7 years ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated last year
• open-nsm / ContainNSM
  Dockerfiles for NSM tools
  ☆84Updated 7 years ago
• zeek / bro-scripts
  Misc. Bro scripts
  ☆63Updated 7 years ago
• xme / cuckoomx
  CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
  ☆41Updated 12 years ago
• anl-cyberscience / FlexTransform
  Enables dynamic translation of structured data between formats
  ☆14Updated 6 years ago