OPNids / coreLinks
OPNids GUI, API and systems backend
☆34Updated 6 years ago
Alternatives and similar repositories for core
Users that are interested in core are comparing it to the libraries listed below
Sorting:
- Expandable Defensive Cyber Operations Platform☆43Updated 3 years ago
- Web service for scanning pcaps with snort☆110Updated 7 years ago
- Passive Real-time Asset Detection System☆249Updated last year
- Suricata Extreme Performance Tuning guide☆214Updated 7 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆107Updated last year
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated last month
- SIAC is an enterprise SIEM built on open-source technology.☆115Updated 7 years ago
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆229Updated 4 years ago
- A RESTful API frontend for Stenographer☆54Updated 3 years ago
- A Simple QUEry and Report Tool☆142Updated 6 years ago
- Tool for managing Zeek deployments.☆59Updated last week
- Alienvault ossim☆123Updated 10 months ago
- Bro/Zeek integration with osquery☆94Updated 5 years ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆177Updated 4 years ago
- ☆49Updated 10 years ago
- OwlH Master API☆24Updated 7 months ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆54Updated last week
- ioc2rpz is a place where threat intelligence meets DNS.☆112Updated 10 months ago
- Docker files for Security Onion☆42Updated 4 years ago
- Bro IDS Dockerfile☆129Updated 6 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆121Updated 7 years ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆34Updated 2 years ago
- A repository for OSSEC rules and decoders☆54Updated 2 years ago
- WebUI of MineMeld☆43Updated 2 years ago
- Snort in Docker for Network Functions Virtualization (NFV)☆110Updated 6 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 7 years ago
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆143Updated this week
- brostash: Linux distribution based on Debian and focusing on network security events collection☆33Updated 5 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Updated 6 years ago