127 Open source projects that are alternatives of or similar to Certstreammonitor

Imports Alienvault OTX pulses to a MISP instance

A tool to monitor a certificate transparency log for operational problems

Highly scalable and high-performance open source PKI (CA and OCSP responder). Minimal dependencies, No-JPA, No-Spring

Certificate transparency for Android and JVM

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

CyCAT.org API back-end server including crawlers

A simple threat hunting tool based on osquery, Salt Open and Cymon API

Defanged Indicator of Compromise (IOC) Extractor.

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Malcom - Malware Communications Analyzer

Microsoft Sentinel SOC Operations

Clusters and elements to attach to MISP events or attributes (like threat actors)

recon-ng modules for Censys

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

Capture passwords of login attempts on non-existent and disabled accounts.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Lightweight program that pollinates STHs between Certificate Transparency logs and auditors

Utilities for Sysmon

Malware Sample Sources

🐺 Malware analysis platform

Tracking APT IOCs

Explore Indicators of Compromise Automatically

Signatures and IoCs from public Volexity blog posts.

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Fully-featured tool that combines state-of-the-art TLS analyzers with a report system that suggests appropriate mitigations and shows the full set of viable attacks.

Semi-automatic OSINT framework and package manager

Standard-Format Threat Intelligence Feeds

Mapping NSM rules to MITRE ATT&CK

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

Python 3 Wrapper for the BinaryEdge API https://www.binaryedge.io/

A helper to run OSINT queries & manage results continuously

CLI tool for open source and threat intelligence

DaProfiler allows you to create a profile on your target based in France only. The particularity of this program is its ability to find the e-mail addresses your target.

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

ioc2rpz is a place where threat intelligence meets DNS.

Modules for expansion services, import and export in MISP

Ayashige provides a list of suspicious newly updated domains as a JSON feed

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Kaspersky's GReAT KLara

This repo contains logstash of various honeypots

OpenCTI connectors

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.

PatrowlHears - Vulnerability Intelligence Center / Exploits

Domain name permutation engine written in Go

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

Authors

Certificate Transparency Log Monitor

🚌 The missing link to connect open-source threat intelligence tools.

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

Threat Hunting queries for various attacks

A program for submitting X.509 certificate chains to Certificate Transparency log servers.

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

Python3 library and command line for GreyNoise

Real-time HTTP Intrusion Detection

Information about my experiences on ethical hacking 💀

Extract and aggregate threat intelligence.