958 Open source projects that are alternatives of or similar to Ioc Explorer

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Microsoft Sentinel SOC Operations

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Extract and aggregate threat intelligence.

Malware Sample Sources

Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A toolkit for Security Researchers

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

ThePhish: an automated phishing email analysis tool

recon-ng modules for Censys

BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you

#ThreatHunting #DFIR #Malware #Detection Mind Maps

PatrowlHears - Vulnerability Intelligence Center / Exploits

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.

Don't Just Search OSINT. Sweep It.

All-in-one bundle of MISP, TheHive and Cortex

Threat Hunting queries for various attacks

Bringing you the best of the worst files on the Internet.

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

Plugin to block compilation when unapproved dependencies are used or code styling does not comply.

Recon Hunt Queries

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Clusters and elements to attach to MISP events or attributes (like threat actors)

YARA malware query accelerator (web frontend)

secureCodeBox (SCB) - continuous secure delivery out of the box

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Web Scan Lazy Tools - Python Package

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

🔎 shodansploit > v1.3.0

Secure, Unified, Powerful and Extensible Rust Android Analyzer

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Web application vulnerability scanner

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

a tool to analyze filesystem images for security

Performing security tests inside your CI

Python 3 Wrapper for the BinaryEdge API https://www.binaryedge.io/

Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

Trigram database written in C++, suited for malware indexing

Golang security checker

Attack Surface Management Platform | Sn1perSecurity LLC

OPCDE Cybersecurity Conference Materials

A curated list of tools for incident response

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Open source incident management and response platform.

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Infection Monkey - An automated pentest tool