vishal1991 / Network-ForensicsLinks
• Packet capture (PCAP) file analysis to analyze traffic sent by malicious IP address.
☆12Updated 10 years ago
Alternatives and similar repositories for Network-Forensics
Users that are interested in Network-Forensics are comparing it to the libraries listed below
Sorting:
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago
- A web-based tool to assist the work of the intuitive threat analysts.☆114Updated 6 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- Contributed Bro Scripts☆30Updated 11 years ago
- IOC Management and Visualization Tool☆48Updated 3 years ago
- Utility for parsing Bro log files into CSV or JSON format☆42Updated 2 years ago
- This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant ya…☆122Updated 4 years ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- Imports Alienvault OTX pulses to a MISP instance☆53Updated 4 years ago
- Malware/IOC ingestion and processing engine☆108Updated 7 years ago
- TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…☆156Updated 6 months ago
- A map displaying threat actors from the misp-galaxy☆33Updated 2 years ago
- A tool to convert MISP XML files (events and attributes) into graphs☆20Updated 8 years ago
- Cyber Intel Management☆50Updated 7 years ago
- Various Bro scripts☆96Updated 9 years ago
- A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).☆16Updated 6 years ago
- Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner☆44Updated 4 years ago
- Scripts for Bro IDS and ELK Stack☆57Updated 10 years ago
- Extract files from network traffic with Zeek.☆103Updated 5 years ago
- An ICAP Server with yara scanner for URL and content.☆58Updated 11 months ago
- CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)☆41Updated 13 years ago
- Gather and compile open source threat intelligence feeds.☆40Updated 3 years ago
- Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…☆150Updated 11 years ago
- Passive DNS V2☆60Updated 11 years ago
- MISP website (hugo-based)☆25Updated this week
- An informational repo about hunting for adversaries in your IT environment.☆14Updated 8 years ago
- VisualFirewall/IDS is a research-grade Firewall and IDS visualization tool that aims to provide a highly-informative interface of network…☆15Updated 11 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 5 years ago
- A framework for receiving and redistributing abuse feeds☆125Updated 6 years ago
- Detect cryptocurrency mining traffic with Zeek.☆46Updated 4 years ago