Scribery / aushape
A library and a tool for converting audit logs to XML and JSON
☆45Updated 7 years ago
Alternatives and similar repositories for aushape:
Users that are interested in aushape are comparing it to the libraries listed below
- ☆42Updated 4 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated 2 months ago
- Kibana 5 Templates for Suricata IDPS☆43Updated 6 years ago
- setup zeek, previously Bro IDS☆18Updated 2 months ago
- A 'Universal WHOIS' proxy server - you query it, it gives back the correct details☆39Updated 4 months ago
- A starter-kit for a source-controlled, CLI-based osquery management workflow.☆30Updated 6 years ago
- Zeek package for tracking long connections to report them before they have completed.☆29Updated 3 weeks ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 9 months ago
- from http://www.pc-tools.net/unix/grepcidr/☆90Updated 7 years ago
- ☆24Updated 5 years ago
- harden system (linux, unix...)☆56Updated 3 weeks ago
- Tools for inspecting disk images☆25Updated 6 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆51Updated 7 months ago
- Tool for managing Zeek deployments.☆54Updated last month
- CEF plugin for audisp (Linux Audit)☆23Updated 8 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆102Updated 8 months ago
- Expandable Defensive Cyber Operations Platform☆43Updated 2 years ago
- Ansible role to setup Falco, behavioral security with sysdig☆41Updated this week
- Docker details and examples for the Lynis project☆26Updated 8 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- Bro script package to create JSON formatted logs to stream into data analysis systems.☆28Updated last year
- ☆51Updated last year
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆228Updated 4 years ago
- [DEPRECATED] CEF (Common Event Format) input plugin for Graylog☆10Updated 3 years ago
- Puppet module for Auditd☆40Updated 4 years ago
- osquery query packs☆14Updated 6 years ago
- A low/zero interaction ssh authentication logging honeypot☆20Updated 6 months ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆30Updated 8 months ago
- Install and configure user mode auditd tools☆34Updated last year
- certgrep is a cross-platform command line tool that extracts SSL certificates from either a network interface or a local PCAP file.☆17Updated 3 years ago