stratosphereips / netflowlabeler
A configurable rule-based labeling tool for network flow files.
☆16Updated last year
Alternatives and similar repositories for netflowlabeler:
Users that are interested in netflowlabeler are comparing it to the libraries listed below
- The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.☆30Updated 5 months ago
- CERTITUDE - A python package to classify malicious URLs☆20Updated 2 years ago
- A privacy-aware exchange module to securely and privately share your indicators☆13Updated 7 years ago
- CyCAT.org API back-end server including crawlers☆29Updated 2 years ago
- D4 core software (server and sample sensor client)☆42Updated last year
- A Spicy protocol analyzer for WireGuard☆29Updated 4 years ago
- Python CLI and module for CIRCL hash lookup☆12Updated 2 months ago
- Network Entity Reputation Database☆34Updated 2 months ago
- CSIRT Tooling: Best Practices in Developing, Maintaining and Distributing Open Source Tools☆16Updated 2 years ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)☆72Updated 9 months ago
- server for indexing and querying passive DNS observations☆46Updated last month
- A mapping project between tags (annotations, labels) and domain names☆11Updated last year
- External twitter feeder for AIL framework☆16Updated 2 years ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆77Updated 8 months ago
- collect logs and alerts from 27 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.☆16Updated 3 weeks ago
- Fast lookup server for NSRL and other hash database used in digital forensic☆43Updated 2 years ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆32Updated 2 months ago
- The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing conf…☆31Updated 3 years ago
- Declare and keep up a rogue default-gateway in Cisco's HSRP default configuration☆18Updated 7 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 2 years ago
- Firepit - STIX Columnar Storage☆16Updated 10 months ago
- Threat Detection Rules (Snort/Sigma/Yara)☆13Updated last year
- ☆24Updated 2 years ago
- Tools for Wazuh by Juan C. Tello☆14Updated 3 years ago
- Potiron - Normalize, Index and Visualize Network Capture☆85Updated 6 years ago
- ☆27Updated 4 years ago
- A Passive DNS backend and collector☆31Updated 2 years ago
- Caldera plugin to deploy "humans" to emulate user behavior on systems☆27Updated last year
- Specifications used in the MISP project including MISP core format☆51Updated 3 months ago
- A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB☆18Updated last year