HoneyDB
HoneyDB is a honeypot-based threat intelligence platform that provides real-time insights into attacker behavior, allowing users to monitor and analyze malicious activity on their networks. The platform offers a range of features, including threat API access, network monitoring, and agent deployment, to help organizations improve their threat detection and response capabilities. With HoneyDB, users can gain visibility into attacker tactics, techniques, and procedures (TTPs), and leverage this information to enhance their security posture. The platform's threat intelligence feeds can be integrated with existing security tools, enabling more effective incident response and threat hunting. HoneyDB's user-friendly interface provides easy access to threat data, including IP addresses, protocols, and service information, making it easier for security teams to identify and respond to threats in real-time.
FEATURES
ALTERNATIVES
FireEye Mandiant SunBurst Countermeasures: freely available rules for detecting malicious files and activity
SeaSponge is an accessible web-based threat modeling tool with a focus on accessibility, aesthetics, and intuitive user experience.
The FASTEST Way to Consume Threat Intelligence and make it actionable.
A collection of Yara rules for the Burp Yara-Scanner extension to identify malicious software on websites.
A curated list of resources for learning about deploying, managing, and hunting with Microsoft Sysmon.
Maltego transform pack for analyzing and graphing Honeypots using MySQL data.
Facilitating exchange of information and knowledge to collectively protect against cyberattacks.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.