Modular command-line threat hunting tool & framework.
☆17Jul 20, 2020Updated 6 years ago
Alternatives and similar repositories for plast
Users that are interested in plast are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Work in Progress repo☆16Apr 18, 2019Updated 7 years ago
- ircollect☆31Aug 7, 2013Updated 13 years ago
- Sigma rules converted for direct use with Zircolite☆15Updated this week
- DFIR notebooks GCIH Gold project, paper☆12Apr 30, 2015Updated 11 years ago
- ☆52Sep 5, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- buffer overflow examples☆24Dec 20, 2017Updated 8 years ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆19Jan 10, 2024Updated 2 years ago
- A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-system…☆28Aug 26, 2023Updated 3 years ago
- A Web of Trust Short-Lived Client Certificate System (Server)☆18Sep 10, 2023Updated 3 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Jan 18, 2022Updated 4 years ago
- Yara rules for detecting malware☆22Sep 9, 2025Updated last year
- Read Zeek (Bro) logs into typed Python records; convert to JSON or CSV, map to Elastic Common Schema, load into Elasticsearch.☆42Sep 5, 2026Updated 2 weeks ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 6 months ago
- Plug-ins for AlienVault of course.☆16Jul 5, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fuzzy Hash calculated from import API of PE files☆90Aug 26, 2022Updated 4 years ago
- Process HTTP Pcaps With YARA☆108Jul 29, 2013Updated 13 years ago
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆39Mar 23, 2020Updated 6 years ago
- A Python library to interface with a cuckoo-modified instance☆23Oct 31, 2016Updated 9 years ago
- Event Log Analysis Tools☆31Sep 27, 2016Updated 9 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Yara Scanner For IMAP Feeds and saved Streams☆28Nov 5, 2019Updated 6 years ago
- Tools for the Computer Incident Response Team☆153Apr 17, 2017Updated 9 years ago
- HAR object eXtractor.☆15Apr 23, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 6 years ago
- Packet Dump Decode - one-click packet hexdump decode☆18Jun 20, 2015Updated 11 years ago
- Yara rules for quick reverse engineering of malware.☆18Dec 9, 2015Updated 10 years ago
- A commercial grade threat intelligence feed thats validated and updated every half hour.☆19Mar 24, 2023Updated 3 years ago
- This repo is dedicated to all my tricks, tweaks and modules for testing and hunting threats. This repo contains multiple directories whic…☆57Jan 10, 2018Updated 8 years ago
- Cyber-investigation Analysis Standard Expression (CASE) Ontology☆78Aug 4, 2026Updated last month
- RemoveMD is a website/local tool that allows you to remove metadata from your files.☆23Oct 3, 2025Updated 11 months ago
- Framework to automatically test and explore the capabilities of generic AV engines☆70Jan 15, 2019Updated 7 years ago
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Connector for pulling and converting STIX information from TAXII Service Providers into CB Feeds.☆15Jul 1, 2022Updated 4 years ago
- AgileGrabber is a multi cored and multi threaded port scanner made with python and nmap to make scanning faster.☆15Oct 27, 2022Updated 3 years ago
- Use OpenDNS's investigate API to find newly observed domains which match a brand or string☆12Oct 27, 2016Updated 9 years ago
- PoC compilation of libyara into WASM, for potential future CyberChef integration☆14Sep 18, 2022Updated 4 years ago
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 3 years ago
- A curated list of tools for incident response☆14Jan 22, 2024Updated 2 years ago
- Collect and filter location information from social network services.☆11Jun 14, 2020Updated 6 years ago