Alternatives and similar repositories for snorby

Users that are interested in snorby are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆353Updated last year
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆434Updated 3 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆651Updated 2 weeks ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆702Updated 5 years ago
• Fudge / gltail
  Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
  ☆608Updated 10 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 4 years ago
• mushorg / glastopf
  Web Application Honeypot
  ☆576Updated 10 months ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆238Updated last year
• tobi / clarity
  Web interface for the grep and tail -f unix tools. Useful for real-time log analysis. Remotely related to splunk
  ☆779Updated 6 years ago
• bammv / sguil
  Sguil client for NSM
  ☆218Updated last year
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• ironbee / ironbee
  Universal web application security sensor intended for real-time monitoring and defense.
  ☆305Updated 9 years ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆943Updated 4 years ago
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆578Updated 5 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆507Updated 2 years ago
• Netflix / Fido
  ☆817Updated 8 years ago
• postmodern / ruby-nmap
  A Ruby interface to nmap, the exploration tool and security / port scanner. Allows automating nmap and parsing nmap XML files.
  ☆295Updated last year
• tnich / honssh
  HonSSH is designed to log all SSH communications between a client and server.
  ☆375Updated 3 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆415Updated 2 years ago
• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,085Updated 4 years ago
• ossec / ossec-wui
  OSSEC Web User Interface - Unmaintained!!
  ☆163Updated 3 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆745Updated 5 months ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆430Updated last year
• packetfu / packetfu
  PacketFu, a mid-level packet manipulation library for Ruby
  ☆385Updated last year
• mwielgoszewski / doorman
  an osquery fleet manager
  ☆617Updated 2 years ago
• DNS-OARC / PacketQ
  A tool that provides a basic SQL-frontend to PCAP-files
  ☆396Updated 6 months ago
• mozilla / MozDef
  DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
  ☆2,168Updated 3 years ago
• mcholste / elsa
  Enterprise Log Search and Archive
  ☆210Updated 6 years ago