HoneyDB
HoneyDB is a honeypot-based threat intelligence platform that provides real-time insights into attacker behavior, allowing users to monitor and analyze malicious activity on their networks. The platform offers a range of features, including threat API access, network monitoring, and agent deployment, to help organizations improve their threat detection and response capabilities. With HoneyDB, users can gain visibility into attacker tactics, techniques, and procedures (TTPs), and leverage this information to enhance their security posture. The platform's threat intelligence feeds can be integrated with existing security tools, enabling more effective incident response and threat hunting. HoneyDB's user-friendly interface provides easy access to threat data, including IP addresses, protocols, and service information, making it easier for security teams to identify and respond to threats in real-time.
FEATURES
ALTERNATIVES
A threat intelligence and vulnerability monitoring platform that aggregates security alerts from trusted sources and provides customizable monitoring and notification capabilities.
PolySwarm is a malware intelligence marketplace that aggregates threat detection engines to provide early detection, unique samples, and higher accuracy.
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
Dorothy is a tool to test monitoring and detection capabilities for Okta environments, with modules mapped to MITRE ATT&CK® tactics.
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol, with a focus on incident handling automation and threat intelligence processing.
A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
Globally-accessible knowledge base of adversary tactics and techniques for cybersecurity.
Maltego transform pack for analyzing and graphing Honeypots using MySQL data.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.