Alternatives and similar repositories for securityonion-image

Users that are interested in securityonion-image are comparing it to the libraries listed below

• Security-Onion-Solutions / securityonion-docs
  ☆89Updated 2 weeks ago
• Security-Onion-Solutions / securityonion-soc
  ☆58Updated this week
• weslambert / DinoSOARLab
  Security Onion + Automation + Response Lab including n8n and Velociraptor
  ☆112Updated 2 years ago
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated last week
• weslambert / securityonion-misp
  ☆36Updated 4 years ago
• Shuffle / workflows
  Workflows for Shuffle
  ☆23Updated 2 years ago
• OTRF / OSSEM-CDM
  OSSEM Common Data Model
  ☆56Updated 2 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• OTRF / infosec-jupyter-book
  The Infosec Community Definitive Guide to Jupyter Notebooks
  ☆124Updated 4 years ago
• TheHive-Project / Docker-Templates
  Docker configurations for TheHive, Cortex and 3rd party tools
  ☆126Updated 2 years ago
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆73Updated 2 years ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆68Updated 4 years ago
• corelight / threat-hunting-guide
  ☆53Updated 3 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 5 years ago
• Shuffle / python-apps
  Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:
  ☆116Updated last week
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• mitre / stockpile
  A CALDERA plugin
  ☆77Updated last week
• TheHive-Project / awesome
  A curated list of awesome things related to TheHive & Cortex
  ☆183Updated 3 years ago
• NextronSystems / thor-lite
  Fast IOC and YARA Scanner
  ☆83Updated 5 years ago
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 9 months ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆37Updated last week
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 4 years ago
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆54Updated 3 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆56Updated 11 months ago
• cerebrate-project / cerebrate
  Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…
  ☆90Updated 2 weeks ago
• PolitoInc / ELK-Hunting
  Threat Hunting with ELK Workshop (InfoSecWorld 2017)
  ☆66Updated 7 years ago
• sans-blue-team / sec555-wiki
  ☆77Updated 6 years ago
• clausing / scripts
  ☆67Updated last week
• socprime / soc_workflow_app_ce
  SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…
  ☆94Updated 3 years ago