Alternatives and similar repositories for ThreatDetectionRules

Users that are interested in ThreatDetectionRules are comparing it to the libraries listed below

• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆95Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• jvdroit / Suricata-rules
  ☆9Updated 8 years ago
• pandaof / ATT-CK-and-Atomic-Red-Team
  ☆11Updated last month
• sisoc-tokyo / Real-timeDetectionAD_journal
  ☆24Updated 5 years ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆38Updated last year
• manning23 / ATTCK-technical-data
  ATT&CK技战术数据
  ☆16Updated 4 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• brianwrf / RTEmulation
  It is a repository for Red Team emulation based on MITRE ATT&CK.
  ☆16Updated 5 years ago
• monsterzer0 / Cyber-Security-Guide
  The Whitepaper For Enterprise Security created by Monster Zero Team
  ☆36Updated 8 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆30Updated 9 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago
• Cisco-Talos / Re2Pcap
  ☆55Updated last year
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆115Updated 7 years ago
• threatrack / cti_report_collection
  Repository collecting and automagically processing public threat intelligence reports.
  ☆18Updated 5 years ago
• newtonguass / ADPenLab
  ☆32Updated 5 years ago
• g0rx / Drupal-SA-CORE-2019-003
  CVE-2019-6340-Drupal SA-CORE-2019-003
  ☆32Updated 6 years ago
• Blizzo / tools
  Simple, useful scripts for red/blue team situations
  ☆22Updated 10 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• ruppde / rdg_scanner_cve-2020-0609
  Scanning for Remote Desktop Gateways (Potentially unpatched CVE-2020-0609 and CVE-2020-0610)
  ☆40Updated 5 years ago
• zhanghaoyil / Hawk-I
  Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms
  ☆36Updated 6 years ago
• p1r06u3 / phishing
  The Security Practices of Party A Phishing
  ☆20Updated 5 years ago
• euphrat1ca / ICSwiki
  ICSwiki
  ☆26Updated 5 years ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆97Updated 6 years ago
• Oritz / Dockerizing-SQLiScanner
  Docker image for SQLiScanner
  ☆15Updated 8 years ago
• seecode-audit / clocwalk
  Project code and dependent component analysis tools.
  ☆2Updated last year