Alternatives and similar repositories for CSI-SIEM

Users that are interested in CSI-SIEM are comparing it to the libraries listed below

• adhdproject / awesome-active-defense
  an awesome list of active defense resources
  ☆126Updated 5 years ago
• clairmont32 / VirusTotal-Tools
  Submits multiple domains to VirusTotal API
  ☆59Updated 4 years ago
• DFIRmadness / infosec-fortress
  A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources t…
  ☆54Updated 3 years ago
• mytechnotalent / Zeek-Network-Security-Monitor
  A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the…
  ☆63Updated 2 years ago
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆74Updated 3 weeks ago
• NettleSec / TriOp
  Tool for quickly gathering information from Shodan.io about the number of IPs which satisfy large number of different queries
  ☆49Updated 2 years ago
• StevenD33 / Lab-DFIR-SOC
  ☆70Updated 4 years ago
• simeononsecurity / Blue-Team-Tools
  A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…
  ☆102Updated last year
• HASH1da1 / Gotanda
  Gotanda is browser Web Extension for OSINT.
  ☆194Updated last year
• bobbycin / Kali-Purple
  ☆53Updated 2 years ago
• threat-hunting / awesome-threat-intelligence
  A curated list of Awesome Threat Intelligence resources
  ☆48Updated 7 years ago
• BushidoUK / CTI-Lexicon
  Dictionary of CTI-related acronyms, terms, and jargon
  ☆144Updated last year
• 13Cubed / Abeebus
  A GeoIP lookup utility utilizing ipinfo.io services.
  ☆92Updated last year
• alb-uss / SECMON
  SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.
  ☆219Updated 3 years ago
• NextronSystems / thor-lite
  Fast IOC and YARA Scanner
  ☆83Updated 5 years ago
• dcarlin / Blue-Team-Tools
  This contains a list of Blue Team Tools that I use daily, and have stored here for reference.
  ☆35Updated 7 years ago
• CarlosLannister / awesome-autopsy-plugins
  A list of Autopsy awesome plugins.
  ☆75Updated 3 years ago
• activecm / passer
  Passive service locator, a python sniffer that identifies servers, clients, names and much more
  ☆254Updated 2 years ago
• Security-Onion-Solutions / securityonion-docs
  ☆90Updated 2 weeks ago
• qeeqbox / mitre-visualizer
  🧬 Mitre Interactive Network Graph (APTs, Malware, Tools, Techniques & Tactics)
  ☆98Updated 3 years ago
• davidonzo / apiosintDS
  On demand query API for https://github.com/davidonzo/Threat-Intel project.
  ☆57Updated last year
• karthik997 / Forensic_Toolkit
  Major tools used for Digital Forensic Investigation, includes tools used for Image, Audio, Memory, Network and Disk Image data analysis. …
  ☆85Updated 4 years ago
• moshekaplan / awesome-SOC-appliances
  A curated list of FOSS software appliances for building a SOC
  ☆18Updated 4 years ago
• kaansk / shomon
  Shodan Monitoring integration for TheHive.
  ☆131Updated 9 months ago
• sansinstitute / slingshot
  SANS Slingshot Linux Distribution
  ☆53Updated 4 years ago
• crow1011 / wazuh2thehive
  Wazuh integration TheHive
  ☆39Updated 2 years ago
• cdpxe / nefias
  Network Forensic & Anomaly Detection System; tailored for covert channel/network steganography detection
  ☆27Updated last year
• dfir-dd / incident-response-playbooks
  Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
  ☆49Updated last year
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 5 years ago
• qeeqbox / seahorse
  ELKFH - Elastic, Logstash, Kibana, Filebeat and Honeypot (HTTP, HTTPS, SSH, RDP, VNC, Redis, MySQL, MONGO, SMB, LDAP)
  ☆46Updated 4 years ago