Alternatives and similar repositories for unfetter:

Users that are interested in unfetter are comparing it to the libraries listed below

• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆179Updated 5 years ago
• nsacyber / unfetter
  Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber
  ☆163Updated 4 years ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆396Updated last year
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆292Updated 3 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆246Updated 4 months ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆427Updated last year
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆331Updated 5 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆500Updated 2 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• mitre / cascade-server
  CASCADE Server
  ☆267Updated 2 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆241Updated last week
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆464Updated 6 years ago
• OTRF / ATTACK-Python-Client
  Python Script to access ATT&CK content available in STIX via a public TAXII server
  ☆562Updated 3 months ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆244Updated 3 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆205Updated 4 years ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆352Updated 4 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• nsacyber / Windows-Event-Log-Messages
  Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
  ☆401Updated 2 years ago
• P4T12ICK / ypsilon
  Automated Use Case Testing
  ☆167Updated 6 years ago
• STIXProject / python-stix
  A Python library for parsing, manipulating, and generating STIX content.
  ☆243Updated 3 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆258Updated 4 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆145Updated 7 months ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆186Updated last year
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆175Updated 4 years ago
• mitre-attack / tram
  Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
  ☆349Updated 3 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated last year
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆336Updated 2 years ago