ldo-cert Goto Github PK

ail-framework

AIL framework - Analysis Information Leak framework

bind_sinkhole

Bind Sinkhole from MISP - Docker Image (dnstap enabled)

cortex-analyzers

Cortex Analyzers Repository

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cuckoo-modified

Modified edition of cuckoo

cybershield

dnstap_reader

DNSTap reader (and parser)

fireeye2th

FireEye iSIGHT Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform

impfuzzy

Fuzzy Hash calculated from import API of PE files

ioc_parser

Tool to extract indicators of compromise from security reports in PDF format

iplog

iplog is a TCP/IP traffic logger with passive os fingerprinting integration

malwareclustering

MalwareClustering with ApiVector

mans_to_es

Parses the FireEye HX .mans triage collections and sends them to ElasticSearch

methlab

misp

MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)

misp-modules

Modules for expansion services, import and export in MISP

misp-objects

Definition, description and relationship types of MISP objects

misp-summit-04

misp-summit-05

MISP Threat Intelligence Summit 0x05 at hack.lu 2019.

nextcloud-cuckoo

Plugin for integrate nextcloud with cuckoo sandbox

orochi

The Volatility Collaborative GUI

pylouvain

A Python implementation of the Louvain method to find communities in large networks

pymisp

Python library using the MISP Rest API

rootthebox

A Game of Hackers (CTF Scoreboard & Game Manager)

thehive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

thehiveutils

Utilities for The Hive

timesketch

Collaborative forensic timeline analysis