Alternatives and similar repositories for OpenSIEM-Logstash-Parsing:

Users that are interested in OpenSIEM-Logstash-Parsing are comparing it to the libraries listed below

• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆253Updated 3 years ago
• 3CORESec / SIEGMA
  SIEGMA - Transform Sigma rules into SIEM consumables
  ☆149Updated 2 weeks ago
• socprime / SigmaUI
  SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
  ☆186Updated 3 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated last year
• elastic / ecs-mapper
  Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash
  ☆54Updated 3 years ago
• HKcyberstark / wazuh-ecs
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆27Updated 4 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆52Updated 6 months ago
• enotspe / fortinet-2-elasticsearch
  Fortinet products logs to Elasticsearch
  ☆96Updated 6 months ago
• PaloAltoNetworks / minemeld
  Main MineMeld documentation repo
  ☆379Updated 7 years ago
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆273Updated last year
• ExabeamLabs / Content-Doc
  ☆125Updated last year
• TheHive-Project / awesome
  A curated list of awesome things related to TheHive & Cortex
  ☆177Updated 3 years ago
• demisto / COPS
  Collaborative Open Playbook Standard
  ☆154Updated last year
• sophos / Sophos-Central-SIEM-Integration
  Simple integration script for 3rd party systems such as SIEMs. Offers command line, file or syslog output in CEF, JSON or key-value pair …
  ☆130Updated last year
• josh-morin / qradar
  Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.
  ☆80Updated 7 months ago
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated this week
• mhassan2 / splunk-n-box
  Docker Splunk "Orchestration" bash script (6,000+ lines) to create fully automated pre-configured splunk site-2-site clusters or stand al…
  ☆138Updated 5 years ago
• hire-vladimir / SA-cim_vladiator
  Data validator agains Splunk Common Information Model (CIM)
  ☆75Updated 11 months ago
• socprime / soc_workflow_app_ce
  SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…
  ☆94Updated 2 years ago
• empow / logstash-parsers
  ☆37Updated 5 years ago
• michaelhidalgo / attack-to-elk
  This program exports MITRE ATT&CK framework in ELK dashboard
  ☆78Updated 2 years ago
• HASecuritySolutions / Presentations
  ☆131Updated last year
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆396Updated last year
• P4T12ICK / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆110Updated 4 years ago
• counteractive / o365beat
  Elastic Beat for fetching and shipping Office 365 audit events
  ☆66Updated 4 years ago
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆282Updated last year
• P4T12ICK / ypsilon
  Automated Use Case Testing
  ☆167Updated 6 years ago
• pe3zx / mthc
  All-in-one bundle of MISP, TheHive and Cortex
  ☆170Updated 2 years ago
• guilhemmarchand / trackme
  TrackMe - Data tracking system for Splunk admins
  ☆50Updated 2 years ago
• airbus-cyber / graylog-plugin-alert-wizard
  Alert Wizard plugin for Graylog to manage the alert rules
  ☆47Updated last week