Alternatives and similar repositories for synapse:

Users that are interested in synapse are comparing it to the libraries listed below

• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆307Updated last week
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• MISP / misp-taxonomies
  Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
  ☆270Updated 3 weeks ago
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆308Updated last month
• MISP / misp-modules
  Modules for expansion services, enrichment, import and export in MISP and other tools.
  ☆354Updated this week
• mitre / cascade-server
  CASCADE Server
  ☆267Updated 2 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆137Updated 4 years ago
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆915Updated last week
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated last year
• TheHive-Project / Cortex-Analyzers
  Cortex Analyzers Repository
  ☆450Updated this week
• target / huntlib
  A Python library to help with some common threat hunting data analysis operations
  ☆142Updated last year
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆373Updated 2 years ago
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆282Updated last year
• redcanaryco / chain-reactor
  Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
  ☆303Updated 4 months ago
• oasis-open / cti-python-stix2
  OASIS TC Open Repository: Python APIs for STIX 2
  ☆379Updated 2 weeks ago
• pan-unit42 / playbook_viewer
  ☆172Updated 9 months ago
• MISP / misp-book
  User guide of MISP
  ☆266Updated 3 months ago
• endgameinc / eql
  ☆218Updated last year
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 3 years ago
• OTRF / ATTACK-Python-Client
  Python Script to access ATT&CK content available in STIX via a public TAXII server
  ☆562Updated 3 months ago
• mitre-attack / bzar
  A set of Zeek scripts to detect ATT&CK techniques.
  ☆582Updated 9 months ago
• opencybersecurityalliance / kestrel-lang
  Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
  ☆311Updated 6 months ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆500Updated 2 years ago
• unfetter-discover / unfetter
  The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose f…
  ☆412Updated 2 years ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆396Updated last year
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆207Updated last month
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆438Updated this week
• swimlane / pyattck
  A Python package to interact with the Mitre ATT&CK Framework
  ☆475Updated last year
• TheHive-Project / TheHive4py
  Python API Client for TheHive
  ☆222Updated 3 weeks ago