Alternatives and similar repositories for securityonion-setup

Users that are interested in securityonion-setup are comparing it to the libraries listed below

• Security-Onion-Solutions / securityonion-bro-scripts
  ☆24Updated 5 years ago
• STIXProject / Tools
  STIX Tools & Scripts
  ☆47Updated 11 years ago
• StamusNetworks / ansible-misp
  Ansible playbook to install Malware Information Sharing Platform (MISP)
  ☆17Updated 10 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆47Updated 11 years ago
• fox-it / bro-scripts
  Bro-IDS scripts
  ☆50Updated 8 years ago
• hillar / vagrant_moloch_bro_suricata
  vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana
  ☆41Updated 10 years ago
• vmware-archive / bit9platform
  Bit9 Platform
  ☆20Updated 7 years ago
• CIRCL / traceroute-circl
  Traceroute improved wrapper for CSIRT and CERT operators
  ☆38Updated 7 months ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• jonschipp / mal-dnssearch
  Compare multiple log formats against malware reputation lists.
  ☆88Updated 7 years ago
• shirkdog / hunter-nsm
  Simple install script for Suricata/Zeek with JSON logging on FreeBSD
  ☆18Updated last month
• joelwking / Phantom-Cyber
  Apps for Splunk Phantom security automation | Cisco Meraki | Ansible Tower | F5 | A10
  ☆26Updated 4 years ago
• hadojae / redonion
  **BETA** A simple buildscript for network security monitoring on RHEL/CentOS
  ☆31Updated 8 years ago
• Xen0ph0n / MIDAS
  Metadata Inspection Database Alerting System
  ☆42Updated 11 years ago
• jusafing / pnaf
  Passive Network Audit Framework
  ☆32Updated 6 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆77Updated 9 years ago
• averagesecurityguy / blue
  Scripts that are suited for blue teams
  ☆33Updated 9 years ago
• kost / docker-moloch
  A Docker container for Moloch based on minimal Debian
  ☆26Updated 9 years ago
• criticalstack / bro-scripts
  ☆71Updated 3 years ago
• xme / mime2vt
  Unpack MIME attachments from a file and check them against virustotal.com
  ☆44Updated 9 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• ncsa / ossec-tools
  Scripts and integrations for OSSEC
  ☆40Updated 9 years ago
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆28Updated last year
• TAXIIProject / yeti
  YETI is a TAXII implementation
  ☆46Updated 6 years ago
• johestephan / ibmxforceex.checker.py
  Python based client for IBM XForce Exchange
  ☆25Updated 8 years ago
• wolfpack1 / threatrecon
  API Tools
  ☆27Updated 9 years ago
• eSentire / malfeed
  Feed for verious malicious IPs such as malware and botnets
  ☆12Updated 8 years ago
• midnightslacker / threat_intel
  Gather and compile open source threat intelligence feeds.
  ☆39Updated 3 years ago
• jheise / threatcmd
  Cli interface to threatcrowd.org
  ☆19Updated 7 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago