Alternatives and similar repositories for graph_alert_correlation

Users that are interested in graph_alert_correlation are comparing it to the libraries listed below

• ait-aecid / aecid-alert-aggregation
  A method for grouping, clustering, and merging semi-structured alerts
  ☆23Updated 8 months ago
• tudelft-cda-lab / SAGE
  [TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854
  ☆37Updated last year
• qinjr / HERCULE
  A naive implementation of HERCULE, an attack story reconstruction system using community discovery on correlated log graph
  ☆15Updated 7 years ago
• ait-aecid / alert-data-set
  Scripts to generate and analyze the AIT alert data set (AIT-ADS)
  ☆23Updated last week
• lucadivit / Pcap_Features_Extraction
  This program allow you to extract some features from pcap files.
  ☆40Updated 2 years ago
• Thijsvanede / DeepCASE
  Original implementation and resources of DeepCASE as in the S&P '22 paper
  ☆92Updated last year
• omid-s / cyber_deception
  ☆14Updated 4 years ago
• crimson-unicorn / analyzer
  GraphChi's C++ version. Big Data - small machine.
  ☆18Updated 4 years ago
• sbustreamspot / sbustreamspot-data
  Datasets used in the StreamSpot experiments
  ☆61Updated 9 years ago
• ait-aecid / kyoushi-environment
  Scripts to deploy virtual testbed for log data analysis and anomaly detection.
  ☆25Updated last year
• sbustreamspot / sbustreamspot-core
  Core streaming heterogeneous graph clustering and anomaly detection code (KDD 2016)
  ☆40Updated 5 years ago
• akafengfeng / AI-Security
  This is a paper list about Machine Learning for IDSes
  ☆89Updated 10 months ago
• purseclab / ATLAS
  ATLAS: A Sequence-based Learning Approach for Attack Investigation
  ☆161Updated 2 years ago
• Stream-AD / MStream
  Anomaly Detection on Time-Evolving Streams in Real-time. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies.
  ☆120Updated last year
• pnnl / safekit
  ☆143Updated 4 years ago
• ksatvat / EXTRACTOR
  ☆78Updated 2 years ago
• ymirsky / KitNET-py
  KitNET is a lightweight online anomaly detection algorithm, which uses an ensemble of autoencoders.
  ☆241Updated last year
• iHeartGraph / Euler
  ☆55Updated last year
• crimson-unicorn / parsers
  ☆24Updated 4 years ago
• darpa-i2o / Transparent-Computing
  Material from the DARPA Transparent Computing Program
  ☆196Updated 5 years ago
• genimind / cyberanom
  Cyber Anomaly Detection using RNN Language model
  ☆9Updated 7 years ago
• jones5am / Network_DOS_Attack_Detection
  Using the 1998 DARPA Intrusion Detection Evaluation dataset I configured a Random Forest model for anomaly detection
  ☆14Updated 6 years ago
• jackaduma / ThreatReportExtractor
  Extracting Attack Behavior from Threat Reports
  ☆77Updated 2 years ago
• JoakimBulow / InsiderThreatIsolationForest
  Insider Threat Detection using Isolation Forest
  ☆16Updated 7 years ago
• aiforsec / InsiderThreat
  ☆13Updated 3 years ago
• iHeartGraph / Illuminati
  ☆17Updated 3 years ago
• cyberImperial / attack-graphs
  Attack graph construction and analysis
  ☆34Updated 6 years ago
• FiveDirections / OpTC-data
  ☆113Updated 5 years ago
• crimson-unicorn / modeler
  ☆24Updated 4 years ago
• li-zhenyuan / Knowledge-enhanced-Attack-Graph
  AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports
  ☆153Updated 2 years ago