Cargill / OpenSIEM-Logstash-Parsing
SIEM Logstash parsing for more than hundred technologies
☆183Updated this week
Alternatives and similar repositories for OpenSIEM-Logstash-Parsing:
Users that are interested in OpenSIEM-Logstash-Parsing are comparing it to the libraries listed below
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 2 years ago
- Contains Logstash related content including tons of Logstash configurations☆253Updated 3 years ago
- Wazuh - Splunk App☆52Updated 5 months ago
- Splunk code (SPL) for serious threat hunters and detection engineers.☆271Updated last year
- SIEGMA - Transform Sigma rules into SIEM consumables☆146Updated last year
- Splunk Admins application to assist with troubleshooting Splunk enterprise installations☆94Updated this week
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆185Updated 3 years ago
- A curated list of awesome things related to TheHive & Cortex☆175Updated 3 years ago
- ☆123Updated last year
- Splunk Content Control Tool☆98Updated this week
- TrackMe - Data tracking system for Splunk admins☆50Updated 2 years ago
- Documentation of Cortex☆172Updated last year
- Docker image for MISP☆122Updated last month
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆87Updated 2 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆27Updated 4 years ago
- Fortinet products logs to Elasticsearch☆95Updated 5 months ago
- Collaborative Open Playbook Standard☆153Updated last year
- ☆131Updated 10 months ago
- Splunk Connect for Syslog☆160Updated this week
- Data validator agains Splunk Common Information Model (CIM)☆75Updated 10 months ago
- RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…☆49Updated 2 months ago
- Python API Client for TheHive☆219Updated this week
- Phantom Apps Repo☆82Updated 3 years ago
- Phantom Community Playbooks☆487Updated 2 weeks ago
- ☆212Updated last year
- Documentation of TheHive☆396Updated last year
- A knowledge base of actionable Incident Response techniques☆628Updated 2 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆52Updated 2 weeks ago
- MISP Docker (XME edition)☆283Updated last year
- Splunk App for Linux Auditd☆57Updated 3 years ago