Alternatives and similar repositories for securityonion-image

Users that are interested in securityonion-image are comparing it to the libraries listed below

• Security-Onion-Solutions / securityonion-soc
  ☆55Updated last week
• Security-Onion-Solutions / securityonion-docs
  ☆89Updated last week
• weslambert / securityonion-misp
  ☆36Updated 4 years ago
• TheHive-Project / Docker-Templates
  Docker configurations for TheHive, Cortex and 3rd party tools
  ☆126Updated 2 years ago
• corelight / threat-hunting-guide
  ☆52Updated 3 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• Shuffle / workflows
  Workflows for Shuffle
  ☆23Updated 2 years ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆68Updated 4 years ago
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated this week
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆54Updated 3 years ago
• OTRF / OSSEM-CDM
  OSSEM Common Data Model
  ☆56Updated 2 years ago
• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆39Updated 3 years ago
• activecm / docker-zeek
  Run zeek with zeekctl in docker
  ☆55Updated 11 months ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆48Updated 2 years ago
• sensoroni / sensoroni
  Web-based sensor management suite
  ☆20Updated 2 years ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• CERT-Bund / IRNetTools
  Incident Response Network Tools
  ☆24Updated 4 years ago
• TheHive-Project / awesome
  A curated list of awesome things related to TheHive & Cortex
  ☆183Updated 3 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆56Updated 11 months ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆106Updated last year
• HKcyberstark / wazuh-ecs
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆27Updated 5 years ago
• weslambert / DinoSOARLab
  Security Onion + Automation + Response Lab including n8n and Velociraptor
  ☆112Updated 2 years ago
• OTRF / sigma
  Generic Signature Format for SIEM Systems
  ☆14Updated 3 years ago
• Shuffle / python-apps
  Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:
  ☆116Updated last week
• activecm / espy
  Endpoint detection for remote hosts for consumption by RITA and Elasticsearch
  ☆73Updated 2 years ago
• clausing / scripts
  ☆67Updated 3 weeks ago
• austinsonger / Elastic-Security
  Repo for Automations and other solutions for Elastic SIEM/Security.
  ☆18Updated 4 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 5 years ago
• corelight / zeek2es
  A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…
  ☆35Updated 3 years ago