Alternatives and similar repositories for ThreatDetectionRules

Users that are interested in ThreatDetectionRules are comparing it to the libraries listed below

• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆95Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 6 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• pandaof / ATT-CK-and-Atomic-Red-Team
  ☆11Updated 3 months ago
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 5 years ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆38Updated last year
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 6 years ago
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• tstillz / webshell-scan
  Simple web shell scanner written in Golang.
  ☆90Updated 6 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• threatrack / cti_report_collection
  Repository collecting and automagically processing public threat intelligence reports.
  ☆18Updated 5 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆30Updated 9 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago
• imjdl / CVE-2019-11510-poc
  Pulse Secure SSL VPN pre-auth file reading
  ☆50Updated 6 years ago
• g0rx / Drupal-SA-CORE-2019-003
  CVE-2019-6340-Drupal SA-CORE-2019-003
  ☆32Updated 6 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆115Updated 7 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆165Updated 6 years ago
• fox-it / cobaltstrike-extraneous-space
  Historical list of {Cobalt Strike,NanoHTTPD} servers
  ☆121Updated 6 years ago
• Cisco-Talos / Re2Pcap
  ☆55Updated last year
• delvelabs / htcap
  htcap is a web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM c…
  ☆18Updated 7 years ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆98Updated 6 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• RickGray / zgrab-mini
  Minimal version for https://github.com/zmap/zgrab.
  ☆16Updated 2 years ago
• yanlinlin82 / plcscan
  Automatically exported from code.google.com/p/plcscan
  ☆58Updated 10 years ago
• silience / sql
  ☆13Updated 7 years ago
• newtonguass / ADPenLab
  ☆32Updated 5 years ago
• yukito / arachni-python-client
  Arachni is one of the famous web scanner. This project is python script to handle arachni api.
  ☆13Updated 7 years ago
• SecureDataLabs / BlackHat-EU-2018
  Black Hat EU 2018 - Don't Eat Spaghetti with a Spoon - An Analysis of the Practical Value of Threat Intelligence
  ☆22Updated 6 years ago
• Cryin / Wafid
  Wafid allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  ☆10Updated 4 years ago
• kirillwow / ids_bypass
  IDS Bypass tricks
  ☆122Updated 6 years ago