teamdfir / sift-bootstrap
SIFT Bootstrap Script
☆146Updated 7 years ago
Alternatives and similar repositories for sift-bootstrap:
Users that are interested in sift-bootstrap are comparing it to the libraries listed below
- Collecting & Hunting for IOCs with gusto and style☆116Updated 6 years ago
- a Malware/Threat Analyst Desktop☆89Updated 9 years ago
- Docker container for MISP☆96Updated 6 years ago
- VolDiff: Malware Memory Footprint Analysis based on Volatility☆194Updated 7 years ago
- Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.☆115Updated 8 years ago
- Script for generating Bro intel files from pdf or html reports☆76Updated 9 years ago
- Salt States for Configuring the SIFT Workstation☆100Updated 2 weeks ago
- Threat Analysis, Reconnaissance, and Data Intelligence System☆125Updated 9 years ago
- (Unofficial) Python API for https://malwr.com/☆62Updated 8 years ago
- Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc…☆79Updated 9 years ago
- Bro scripts written by CrowdStrike Services☆146Updated 3 years ago
- Auto Installer Script for Cuckoo Sandbox☆165Updated 6 years ago
- QRadio ~ Best Threat Intelligence Radio ~ Tune In!☆96Updated 8 years ago
- ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)☆179Updated 5 years ago
- Web interface for the Volatility Memory Forensics Framework☆260Updated 7 years ago
- AuditParser☆59Updated 11 years ago
- ☆71Updated 3 years ago
- IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.☆135Updated 9 years ago
- Harbinger Threat Intelligence☆83Updated 9 years ago
- CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by lever…☆128Updated 6 years ago
- GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1…☆139Updated 6 years ago
- Sandia Cyber Omni Tracker (SCOT)☆246Updated 5 months ago
- CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities☆186Updated last year
- Carbon Black API Resources☆93Updated 7 years ago
- Honeypot Intelligence with Splunk☆254Updated 6 years ago
- ☆202Updated last year
- Beholder is a shell script which installs and configures essentials to peer into your network activity.☆19Updated 7 years ago
- Basic Anomaly IDS capabilities with Python and Bro☆105Updated 7 years ago
- Improvements of/over the original rule2alert☆56Updated 10 years ago
- Differential Analysis of Malware in Memory☆211Updated 8 years ago