sysmon-config VS ThreatIngestor

Compare sysmon-config vs ThreatIngestor and see what are their differences.

sysmon-config

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events. (by ion-storm)
Sysmon Threatintel threat-hunting Netsec sysinternals Logging Graylog graylog-plugin Dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts Forensics Siem sigma-rules humio
Source Code
Suggest alternative
Edit details

ThreatIngestor

Extract and aggregate threat intelligence. (by InQuest)
IoC indicators-of-compromise Threatintel threat-intelligence Osint Dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform Yara soar
Source Code
inquest.readthedocs.io
Suggest alternative
Edit details
InfluxDB
Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
Our great sponsors
sysmon-config ThreatIngestor
1 1
749 786
- 2.9%
7.2 7.6
6 months ago 3 months ago
PowerShell Python
GNU Lesser General Public License v3.0 only GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

sysmon-config

Posts with mentions or reviews of sysmon-config. We have used some of these posts to build our list of alternatives and similar projects.

ThreatIngestor

Posts with mentions or reviews of ThreatIngestor. We have used some of these posts to build our list of alternatives and similar projects.

What are some alternatives?

When comparing sysmon-config and ThreatIngestor you can also consider the following projects:

SysmonTools - Utilities for Sysmon

C2IntelFeeds - Automatically created C2 Feeds

yeti - Your Everyday Threat Intelligence

YaraHunter - 🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

sysmon-modular - A repository of sysmon configuration modules

harpoon

cowrie - Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

misp-warninglists - Warning lists to inform users of MISP about potential false-positives or other information in indicators

DFIRMindMaps - A repository of DFIR-related Mind Maps geared towards the visual learners!

StalkPhish - StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

MISP - MISP (core software) - Open Source Threat Intelligence and Sharing Platform

cURL_for_OSINT - cURL Tool Usage for OSINT (Open-Source Intelligence)

sysmon-config vs SysmonTools ThreatIngestor vs C2IntelFeeds sysmon-config vs yeti ThreatIngestor vs YaraHunter sysmon-config vs sysmon-modular ThreatIngestor vs harpoon sysmon-config vs cowrie ThreatIngestor vs misp-warninglists sysmon-config vs DFIRMindMaps ThreatIngestor vs StalkPhish sysmon-config vs MISP ThreatIngestor vs cURL_for_OSINT