Alternatives and similar repositories for opensoc

Users that are interested in opensoc are comparing it to the libraries listed below

• apache / metron
  Apache Metron
  ☆867Updated 4 months ago
• apache / incubator-spot
  Mirror of Apache Spot
  ☆354Updated 2 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆134Updated 2 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 10 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆660Updated 6 years ago
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆456Updated 3 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆907Updated 6 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆472Updated 6 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 7 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆434Updated 2 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆249Updated last year
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆670Updated last week
• Ptr32Void / OSTrICa
  ☆307Updated 8 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆283Updated 5 months ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆510Updated 3 weeks ago
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆354Updated last year
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆747Updated last year
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆509Updated 3 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆229Updated 4 years ago
• jpalanco / alienvault-ossim
  Alienvault ossim
  ☆123Updated 10 months ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆456Updated 2 years ago
• ciscocsirt / GOSINT
  The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
  ☆551Updated 2 years ago
• packetloop / packetpig
  Packetpig - Open Source Big Data Security Analytics
  ☆298Updated 7 years ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆214Updated 7 years ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆945Updated 4 years ago
• biggiesmallsAG / nightHawkResponse
  Incident Response Forensic Framework
  ☆609Updated 6 years ago
• STIXProject / python-stix
  A Python library for parsing, manipulating, and generating STIX content.
  ☆246Updated 4 years ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆442Updated 4 years ago
• PaloAltoNetworks / minemeld
  Main MineMeld documentation repo
  ☆380Updated 8 years ago