Alternatives and similar repositories for suspicious

Users that are interested in suspicious are comparing it to the libraries listed below

• docintelapp / DocIntel
  Open Source Platform for storing, organizing, and searching documents related to cyber threats
  ☆169Updated 2 years ago
• ANSSI-FR / AnoMark
  Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …
  ☆83Updated last year
• magicsword-io / sigconverter.io
  An opensource sigma conversion tool built using pysigma
  ☆157Updated 3 weeks ago
• korniko98 / pivot-atlas
  ☆102Updated 2 months ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆127Updated 2 years ago
• flowintel / flowintel
  An open source platform to support analysts to organise their case and tasks
  ☆123Updated last week
• MISP / misp-playbooks
  MISP Playbooks
  ☆222Updated 3 months ago
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆121Updated 2 years ago
• TazWake / Public
  Collection of scripts provided for public use
  ☆39Updated last week
• magicsword-io / LOLRMM
  LotL RMM
  ☆289Updated last week
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆76Updated last year
• gertjanbruggink / metrics
  This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
  ☆114Updated last year
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆278Updated last week
• northsh / detection.studio
  Convert Sigma rules to SIEM queries, directly in your browser.
  ☆109Updated 2 weeks ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆14Updated last year
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆172Updated 2 months ago
• intel471 / CU-GIR
  Cyber Underground General Intelligence Requirements
  ☆97Updated 2 years ago
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆132Updated last year
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆279Updated 10 months ago
• COSSAS / SOARCA
  SOARCA - The Open Source CACAO-based Security Orchestrator!
  ☆101Updated this week
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆263Updated 2 years ago
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆54Updated 4 months ago
• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆163Updated 2 months ago
• curated-intel / Threat-Actor-Profile-Guide
  The Threat Actor Profile Guide for CTI Analysts
  ☆116Updated 2 years ago
• dfir-iris / iris-client
  Python client for DFIR-IRIS
  ☆25Updated last year
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆74Updated last month
• center-for-threat-informed-defense / summiting-the-pyramid
  Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…
  ☆55Updated last week
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆119Updated 3 weeks ago
• SigmaHQ / pySigma-backend-elasticsearch
  pySigma Elasticsearch backend
  ☆62Updated last week
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆196Updated this week