csirt 开源项目推荐（68 个）

cyb3rxp /awesome-soc

A curated knowledge base to build, run and mature a SOC (including CSIRT).

certtools /intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Spacial /awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

CERT-Polska /karton

Distributed malware processing framework based on Python, Redis and S3.

NVISOsecurity /evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

CERTCC /VINCE

VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.

adulau /DomainClassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

D4-project /BGP-Ranking

BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)

CERT-Polska /training-materials

该项目在 GitHub 上没有填写描述

CERT-Bund /yara-exporter

Exporting MISP event attributes to yara rules usable with Thor apt scanner

GEANT /TRANSITS

Home for TRANSITS materials

CERT-Bund /IRNetTools

Incident Response Network Tools

JMousqueton /IoCManager

Web-based IOC management platform with threat intelligence enrichment for SOC teams

JMousqueton /Badware

Ransomware for demonstration

csirt-tooling-org /tooling-directory

Tools used by CSIRT and especially in the scope of CNW

CZ-NIC /convey

CSV processing and web related data types mutual conversion

csirt-tooling-org /csirt-tooling-best-practices

CSIRT Tooling: Best Practices in Developing, Maintaining and Distributing Open Source Tools

FIRSTdotorg /automation-sig-www

Automation SIG

CERT-Polska /karton-config-extractor

Static configuration extractor for the Karton framework

CERTUNLP /ngen

Incident Response Management System