Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
☆28Jul 21, 2020Updated 6 years ago
Alternatives and similar repositories for wazuh-ecs
Users that are interested in wazuh-ecs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19May 11, 2021Updated 5 years ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆42Jun 8, 2020Updated 6 years ago
- Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug☆12Jun 20, 2020Updated 6 years ago
- Wazuh - Chef cookbooks☆25Jul 26, 2023Updated 3 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆73Jul 21, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Wazuh integration TheHive☆43Feb 21, 2023Updated 3 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆97Apr 13, 2022Updated 4 years ago
- Tools to integrate 2 great security tools OPNsense and Wazuh☆34Aug 26, 2021Updated 5 years ago
- Converts Netwitness log parser configuration to Logstash configuration☆20Sep 10, 2020Updated 5 years ago
- Automated Real-Time Threat Hunting with ATD, Active Response and Elasticsearch/Kibana☆10Aug 17, 2018Updated 8 years ago
- This script is to build Wazuh 4.3 environment☆12May 30, 2022Updated 4 years ago
- Wazuh - Puppet module☆57Updated this week
- Wazuh - Splunk App☆57Jul 7, 2026Updated 2 months ago
- TAXII 2.0 Server implemented in Node JS with MongoDB backend☆12Jan 3, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Parse Suricata rules☆14Aug 1, 2023Updated 3 years ago
- Security Onion Elastic Stack☆46Feb 1, 2021Updated 5 years ago
- Useful scripts for those administering Wazuh☆98Jan 6, 2026Updated 8 months ago
- NIST based open source security automation delivered as AWS cloudformation☆20Jan 8, 2020Updated 6 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- Go command line app to exploit file upload vulnerability☆12Feb 8, 2017Updated 9 years ago
- A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the…☆62Nov 26, 2025Updated 9 months ago
- ☆13Feb 25, 2021Updated 5 years ago
- Wazuh (3.2) cluster on top of Kubernetes (tested with 1.8.6) with a working simple ELK stack.☆16Nov 27, 2018Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tools for Wazuh by Juan C. Tello☆17Jan 13, 2022Updated 4 years ago
- A few quick recipes for those that do not have much time during the day☆22Oct 28, 2024Updated last year
- 🚀 Enterprise-grade Android Monitoring with Elastic: Streamline Fleet Management and Security Insights. 📊☆12Mar 24, 2025Updated last year
- Wazuh - Amazon AWS Cloudformation☆45Jul 26, 2023Updated 3 years ago
- Code for try.zeek.org.☆19Updated this week
- ☆12Jan 28, 2020Updated 6 years ago
- Filebeat module for Squid access.log + Kibana dashboards. ELK 7.x☆17Sep 19, 2020Updated 5 years ago
- Zeek Training Materials/Products☆47Apr 21, 2026Updated 4 months ago
- A simple way of detecting multithreaded exfiltration in Zeek.☆15May 1, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Import specific data sources into the Sigma generic and open signature format.☆78May 6, 2022Updated 4 years ago
- RPM packages for MISP☆41Updated this week
- Cyber threat intelligence crates for Rust☆16Jan 22, 2024Updated 2 years ago
- A script to create and assign SOP tasks into the cases☆20Aug 16, 2020Updated 6 years ago
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆35Jan 4, 2025Updated last year
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆26May 18, 2021Updated 5 years ago
- Web UI for testing Elastic Beats processors☆19Aug 23, 2026Updated 2 weeks ago