Alternatives and similar repositories for StoW

Users that are interested in StoW are comparing it to the libraries listed below

• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆29Updated 11 months ago
• theflakes / sigma_to_wazuh
  Convert Sigma rules to Wazuh rules
  ☆67Updated last year
• dariommr / scripts
  Personal scripts
  ☆15Updated 11 months ago
• weslambert / DinoSOARLab
  Security Onion + Automation + Response Lab including n8n and Velociraptor
  ☆112Updated 2 years ago
• ozanunal0 / viper
  🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Go…
  ☆77Updated 3 weeks ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆85Updated 2 months ago
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆93Updated 3 weeks ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆68Updated 4 years ago
• CrowdStrike / VirtualGHOST
  VirtualGHOST Detection Tool
  ☆92Updated last year
• juaromu / wazuh-opencti
  ☆37Updated 2 years ago
• infobloxopen / threat-intelligence
  ☆90Updated last month
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆71Updated 2 weeks ago
• referefref / sinon
  Automation tool for Windows Deception Host Burn-In
  ☆86Updated 9 months ago
• arsolutioner / fortigate-belsen-leak
  Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group
  ☆86Updated 7 months ago
• krdmnbrk / AttackRuleMap
  Mapping of open-source detection rules and atomic tests.
  ☆176Updated 7 months ago
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆69Updated last year
• juaromu / wazuh
  ☆19Updated 3 years ago
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆128Updated last year
• cisagov / playbook-ng
  Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and evict…
  ☆134Updated last month
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆132Updated 6 months ago
• 0xbad53c / wazuh-detection-rules
  Our collection of Wazuh detection rules for our Offense Lab
  ☆15Updated 3 years ago
• ANSSI-FR / DFIR4vSphere
  Powershell module for VMWare vSphere forensics
  ☆155Updated 10 months ago
• MHaggis / ClickGrab
  Finding ClickFix and FakeCAPTCHA like it's 1999
  ☆49Updated this week
• ekky19 / osint
  Have you ever wanted to search a link or IP address on multiple OSINT pages at once?
  ☆57Updated 2 months ago
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆156Updated 6 months ago
• infosecB / Rulehound
  An index of publicly available and open-source threat detection rulesets.
  ☆122Updated 4 months ago
• activecm / threat-tools
  Tools for simulating threats
  ☆192Updated last year
• NextronSystems / thor-lite
  Fast IOC and YARA Scanner
  ☆83Updated 5 years ago
• keyboardcrunch / SentinelOne-Query-Navigator
  Web based S1 query navigator for one-click threat hunting
  ☆22Updated 4 years ago
• sublime-security / sublime-platform
  A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…
  ☆227Updated last week