Alternatives and similar repositories for watchtower

Users that are interested in watchtower are comparing it to the libraries listed below

• uforia / exitgather
  Tool for automatic list generation of known TOR and VPN exit nodes
  ☆29Updated 2 years ago
• voxpupuli / puppet-misp
  This module installs and configures MISP (Malware Information Sharing Platform)
  ☆13Updated last week
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 2 years ago
• Te-k / commands-for-sec
  Useful commands for infosec
  ☆29Updated 2 years ago
• adulau / misp-osint-collection
  Collection of best practices to add OSINT into MISP and/or MISP communities
  ☆65Updated 2 years ago
• telekom-security / acquire-aws-ec2
  A python script to acquire multiple aws ec2 instances in a forensically sound-ish way
  ☆38Updated 4 years ago
• telekom-security / ewsposter
  collect logs and alerts from 37 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.
  ☆15Updated 4 months ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• jaegeral / awesome-incident-response-pro-bono
  This repository is a curated list of pro bono incident response entities.
  ☆21Updated 2 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆50Updated 3 years ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆90Updated 2 years ago
• melicertes / csp
  The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing conf…
  ☆32Updated 3 years ago
• rly0nheart / occli
  A command line tool that queries the Open Corporates Database and returns data on corporations under the copyleft Open Database License.
  ☆32Updated 2 years ago
• telekom-security / listbot
  🤖 Daily updated translation maps for T-Pot
  ☆22Updated last year
• telekom-security / misp-warning-lists
  ☆33Updated this week
• ninoseki / ayashige
  Ayashige provides a list of suspicious newly updated domains as a JSON feed
  ☆38Updated last year
• Cyb3rWard0g / infosec-well-done
  A few quick recipes for those that do not have much time during the day
  ☆22Updated last year
• 3c7 / infrastructure-tracking-schema
  ☆24Updated 3 years ago
• capesstack / capes-docker
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆14Updated 3 years ago
• ciscocsirt / dhp
  Simple Docker Honeypot server emulating small snippets of the Docker HTTP API
  ☆33Updated 5 years ago
• D4-project / passive-ssh
  A Passive SSH back-end and scanner.
  ☆104Updated 6 months ago
• sfakiana / FIRST-CTI-2019
  References for FIRST CTI 2019 Symposium presentation
  ☆23Updated 6 years ago
• NoDataFound / RiskIQ.SunBurst.Hunter
  The Purpose of this research tool is to provide a Python client into RiskIQ API services.
  ☆22Updated 4 years ago
• veeral-patel / incidents
  Please use https://github.com/veeral-patel/true-positive instead
  ☆70Updated 2 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Updated 2 years ago
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆30Updated 8 years ago
• ioc-fang / ioc-fanger
  Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
  ☆68Updated 2 years ago
• qeeqbox / octopus
  Pure Honeypots with an automated bash script
  ☆20Updated 4 years ago
• MattCarothers / uhp
  Universal Honey Pot
  ☆29Updated 4 months ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆35Updated 2 years ago