Alternatives and similar repositories for synapse

Users that are interested in synapse are comparing it to the libraries listed below

• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆925Updated 2 weeks ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆319Updated this week
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆321Updated 4 months ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• MISP / misp-taxonomies
  Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
  ☆276Updated last week
• MISP / misp-book
  User guide of MISP
  ☆268Updated 5 months ago
• TheHive-Project / Cortex-Analyzers
  Cortex Analyzers Repository
  ☆460Updated last week
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆246Updated 3 years ago
• MISP / misp-modules
  Modules for expansion services, enrichment, import and export in MISP and other tools.
  ☆354Updated last week
• MISP / misp-training
  MISP trainings, threat intel and information sharing training materials with source code
  ☆409Updated last week
• redcanaryco / chain-reactor
  Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
  ☆314Updated 2 months ago
• target / huntlib
  A Python library to help with some common threat hunting data analysis operations
  ☆142Updated 2 years ago
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆293Updated 3 years ago
• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 3 years ago
• atc-project / atc-react
  A knowledge base of actionable Incident Response techniques
  ☆639Updated 3 years ago
• palantir / alerting-detection-strategy-framework
  A framework for developing alerting and detection strategies for incident response.
  ☆750Updated 3 years ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆397Updated last year
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated last year
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆216Updated 2 months ago
• MISP / PyMISP
  Python library using the MISP Rest API
  ☆465Updated 3 weeks ago
• forensicanalysis / artifactcollector
  🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
  ☆288Updated last month
• pan-unit42 / playbook_viewer
  ☆173Updated 11 months ago
• oasis-open / cti-python-stix2
  OASIS TC Open Repository: Python APIs for STIX 2
  ☆384Updated last month
• CERT-Polska / mwdb-core
  Malware repository component for samples & static configuration with REST API interface.
  ☆355Updated last month
• google / cloud-forensics-utils
  Python library to carry out DFIR analysis on the Cloud
  ☆481Updated 2 weeks ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆168Updated 4 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆499Updated 2 years ago
• advanced-threat-research / Yara-Rules
  Repository of YARA rules made by Trellix ATR Team
  ☆597Updated 2 months ago
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆375Updated 3 years ago
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆282Updated last year