BrevilleBro

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

cleverhans

An adversarial example library for constructing attacks, building defenses, and benchmarking both

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

streamalert

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

minemeld

Main MineMeld documentation repo

ioc_parser

Tool to extract indicators of compromise from security reports in PDF format

mhn

Modern Honey Network

rita-legacy

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

PasteHunter

Scanning pastebin with yara rules

phishing_catcher

Phishing catcher using Certstream

malspider

Malspider is a web spidering framework that detects characteristics of web compromises.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

grr

GRR Rapid Response: remote live forensics for incident response

Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

munger

IOC Collector and parser

unfetter

The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose files, issue tracking, and documentation

STIXExtractors