Alternatives and similar repositories for slinkwatch

Users that are interested in slinkwatch are comparing it to the libraries listed below

• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 4 years ago
• woanware / bgp-watcher
  Prototype system to monitor BGP routes and alert when anomalies are identified
  ☆15Updated 6 years ago
• satta / gommunityid
  Go implementation of the Community ID flow hashing standard
  ☆20Updated 3 months ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆43Updated 8 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 5 years ago
• t2mune / nield
  A tool to generate log messages related to interfaces, neighbor cache (ARP,NDP), IP address, routing, FIB rules, traffic control.
  ☆32Updated 9 months ago
• sethhall / domain-tld
  Zeek script library for getting the effective TLD of a domain.
  ☆14Updated last year
• StamusNetworks / surimisp
  Check IOC provided by a MISP instance on Suricata events
  ☆17Updated 6 years ago
• DCSO / balboa
  server for indexing and querying passive DNS observations
  ☆46Updated this week
• freetaxii / server
  A cyber threat intelligence server based on TAXII 2 and written in Golang
  ☆30Updated 5 years ago
• socprime / SigmaRulesIntegration
  ☆15Updated 7 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆31Updated last week
• SekoiaLab / FastIR_Server
  The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent
  ☆12Updated 8 years ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆54Updated 3 months ago
• OISF / suricata-trafficid
  Application and service identification rules for Suricata
  ☆18Updated 2 years ago
• set-element / auditdBroFramework
  The Auditd Framework logs and applies security policy to linux auditd data
  ☆15Updated 7 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 8 years ago
• coolacid / GettingStartedWithELK
  Getting Started with ELK
  ☆50Updated 9 years ago
• jakewarren / suricata-rule-generator
  Quickly generate suricata rules for IOCs
  ☆29Updated 4 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 4 years ago
• betheroot / pghoney
  Low-interaction Postgres Honeypot
  ☆19Updated last year
• jheise / yarascanner
  Golang based web service to scan files with yara rules
  ☆26Updated 8 years ago
• proferosec / Threat-Intelligence
  A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.
  ☆10Updated 5 years ago
• blazeinfosec / Flame
  Flame - Send vulnerabilities reports to SIEM
  ☆15Updated 8 years ago
• jonticknor / ElasticPhish
  Proof-of-concept for phishing intelligence in Elastic
  ☆15Updated 6 years ago
• rhaist / surevego
  suricata eve.json parser in Go
  ☆15Updated 6 years ago
• rommelfs / scanner
  nmap/ndiff based scanner with template based notification system in case of infrastructure changes
  ☆18Updated 7 years ago
• Cyberg-ON / Timon-Rules
  Community-based CybergON-powered Suricata rules
  ☆12Updated 3 years ago
• Benster900 / BlogProjects
  Various blog post projects.
  ☆10Updated last year
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆28Updated 2 years ago