staaldraad / fastfluxanalysis
Scripts to detect Fast-Flux and DGA using DNS query responses
☆42Updated 7 years ago
Alternatives and similar repositories for fastfluxanalysis:
Users that are interested in fastfluxanalysis are comparing it to the libraries listed below
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- Passive DNS V2☆62Updated 10 years ago
- Python scripts to parse scans.io ssl data and ingest into elasticsearch for searching☆33Updated 8 years ago
- Honeypot log processor to create OTX Pulse entries☆29Updated last year
- ☆22Updated 7 years ago
- Normalizer for honeypot data.☆45Updated 9 years ago
- Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner☆43Updated 3 years ago
- Efficient clustering of MASSCAN results☆12Updated 8 years ago
- Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers☆72Updated 7 years ago
- OpenFlow Honeypot☆23Updated 12 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆24Updated 7 years ago
- intel amt honeypot☆18Updated 7 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19Updated 7 years ago
- A tool to generate Snort rules based on public IP reputation data☆56Updated 11 years ago
- Crawl certificate information from censys☆8Updated 8 years ago
- Spam Honeypot with Intelligent Virtual Analyzer☆10Updated 9 years ago
- Basic gui to run and display nmap scan results. Just a POC so far.☆31Updated 11 years ago
- JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox☆44Updated 5 years ago
- Anti-Honeypot Demo (obsolete)☆18Updated 7 years ago
- ☆16Updated 10 years ago
- Elasticsearch honeypot written in Python with Bottle framework☆17Updated 5 years ago
- collection of python scripts to capture dns traffic and store it in elasticsearch☆8Updated 3 years ago
- Remote timing attack exploit against most Zeus/Zbot variants including Citadel, Ice9, Zeus 2.3, KINS/ZeusVM etc..☆24Updated 9 years ago
- A simple Nessus results viewer☆49Updated 11 years ago
- CRL Monitor - X.509 Certificate Revocation List monitoring and X.509/Subject caching☆34Updated 3 years ago
- Historical Observations of Actionable Reputation Data☆13Updated 6 years ago
- ☆27Updated 7 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 9 years ago
- Multiple rules for yara-project for detect compiler/packer/protector☆33Updated 5 years ago