tatsuiman / rpot2
Real-time Packet Observation Tool
☆39Updated last year
Alternatives and similar repositories for rpot2
Users that are interested in rpot2 are comparing it to the libraries listed below
Sorting:
- Potiron - Normalize, Index and Visualize Network Capture☆85Updated 6 years ago
- Passive Network Audit Framework☆32Updated 7 years ago
- Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...☆72Updated 6 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk☆23Updated 6 years ago
- ☆24Updated 5 years ago
- Flexible framework that allows automation to process cyber threat information and update endpoint defense tools.☆21Updated 6 years ago
- brostash: Linux distribution based on Debian and focusing on network security events collection☆34Updated 4 years ago
- Feed for verious malicious IPs such as malware and botnets☆12Updated 8 years ago
- A tool to convert MISP XML files (events and attributes) into graphs☆20Updated 8 years ago
- Workbench: A scalable python framework for security research and development teams.☆92Updated 5 years ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated last year
- A Docker container for Moloch based on minimal Debian☆13Updated 7 years ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆33Updated last year
- Malware/IOC ingestion and processing engine☆105Updated 6 years ago
- Enrich a host with open source security information☆27Updated 9 years ago
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆96Updated 8 years ago
- Spam trap management☆23Updated 11 months ago
- Debian and Red Hat packaging for SIE DNS sensor☆15Updated 2 years ago
- Plugins written for CVE-Search☆25Updated 4 years ago
- Proof of concept implementation of a cyber threat intelligence and incident handling platform☆11Updated 2 years ago
- Docker configs and build scripts.☆22Updated 10 years ago
- Home to the ActorTrackr source code☆24Updated 7 years ago
- A script to track malware IOCs with OSINT on Twitter.☆53Updated last year
- ☆24Updated 9 years ago
- This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…☆35Updated 6 years ago
- OpenDNS Graph Miner☆45Updated 8 years ago
- Files from my Storm Center Articles☆17Updated last year
- This repository is a curated list of pro bono incident response entities.☆20Updated last year