Alternatives and similar repositories for anomaly-detection-and-monitoring

Users that are interested in anomaly-detection-and-monitoring are comparing it to the libraries listed below

• shendo / websnort
  Web service for scanning pcaps with snort
  ☆109Updated 7 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆209Updated 2 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆105Updated 4 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆247Updated last year
• darvid / nessusbeat
  A Beat that monitors a local Nessus reports directory and outputs scan results to Elasticsearch or Logstash.
  ☆31Updated 8 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆60Updated 5 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆229Updated 4 years ago
• pevma / Suricata-Logstash-Templates
  Templates for Kibana/Logstash to use with Suricata IDPS
  ☆81Updated 9 years ago
• jordan-wright / elastichoney
  A Simple Elasticsearch Honeypot
  ☆188Updated 10 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 5 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated 3 months ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆107Updated 4 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 10 years ago
• cedricbonhomme / pyHIDS
  A HIDS (host-based intrusion detection system) for verifying the integrity of a system.
  ☆58Updated 2 weeks ago
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆55Updated 2 years ago
• ezarko / opendlp
  ☆116Updated 11 years ago
• jpalanco / alienvault-ossim
  Alienvault ossim
  ☆123Updated 8 months ago
• plashchynski / viewssld
  viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…
  ☆73Updated 8 years ago
• whodewho / FluxEnder
  Ender of Fast-Flux malicious domains.
  ☆27Updated 10 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated 2 years ago
• jbaggs / anomalous-dns
  A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.
  ☆36Updated 9 months ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆102Updated 5 years ago
• funtimes-ninja / malware
  Malware samples from honeypots
  ☆71Updated 7 years ago
• binorassocies / brostash
  brostash: Linux distribution based on Debian and focusing on network security events collection
  ☆34Updated 5 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆134Updated last year
• Z-0ne / SCADA-Rules
  Snort rules
  ☆35Updated 6 years ago
• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆33Updated last month
• ozuriexv / SublimeSuricata
  ☆35Updated last year