Alternatives and similar repositories for maltrail

Users that are interested in maltrail are comparing it to the libraries listed below

• ivre / ivre
  Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run yo…
  ☆3,809Updated this week
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆7,124Updated last week
• ossec / ossec-hids
  OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, roo…
  ☆4,824Updated 7 months ago
• VirusTotal / yara
  The pattern matching swiss knife
  ☆9,066Updated last week
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,793Updated 3 years ago
• MISP / MISP
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  ☆5,916Updated this week
• arkime / arkime
  Arkime is an open source, large scale, full packet capturing, indexing, and database system.
  ☆6,808Updated last week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,643Updated last week
• cowrie / cowrie
  Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
  ☆5,866Updated this week
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆4,962Updated 3 months ago
• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,820Updated 4 months ago
• hslatman / awesome-threat-intelligence
  A curated list of Awesome Threat Intelligence resources
  ☆9,176Updated 4 months ago
• elceef / dnstwist
  Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
  ☆5,371Updated 5 months ago
• paralax / awesome-honeypots
  an awesome list of honeypot resources
  ☆9,648Updated 5 months ago
• Yara-Rules / rules
  Repository of yara rules
  ☆4,521Updated last year
• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,102Updated 4 years ago
• meirwah / awesome-incident-response
  A curated list of tools for incident response
  ☆8,441Updated last year
• zmap / zmap
  ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
  ☆5,905Updated 2 weeks ago
• pwnlandia / mhn
  Modern Honey Network
  ☆2,461Updated 9 months ago
• infobyte / faraday
  Open Source Vulnerability Management Platform
  ☆5,940Updated 2 weeks ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,725Updated last year
• mandiant / commando-vm
  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…
  ☆7,351Updated 11 months ago
• StamusNetworks / Clear-NDR-ISO
  A Suricata based NDR distribution
  ☆1,565Updated this week
• kbandla / APTnotes
  Various public documents, whitepapers and articles about APT campaigns
  ☆3,611Updated last year
• rshipp / awesome-malware-analysis
  Defund the Police.
  ☆12,982Updated last year
• desaster / kippo
  Kippo - SSH Honeypot
  ☆1,701Updated last year
• Srinivas11789 / PcapXray
  PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highli…
  ☆1,778Updated 3 years ago
• mitre / caldera
  Automated Adversary Emulation Platform
  ☆6,410Updated last week
• iagox86 / dnscat2
  ☆3,701Updated last year
• Ne0nd0g / merlin
  Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
  ☆5,379Updated 4 months ago