Alternatives and similar repositories for snorby:

Users that are interested in snorby are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆351Updated 10 months ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆641Updated 2 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆425Updated 3 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 3 years ago
• bammv / sguil
  Sguil client for NSM
  ☆216Updated 10 months ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆233Updated 8 months ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆443Updated this week
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆700Updated 5 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆658Updated 5 years ago
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆393Updated last year
• ossec / ossec-wui
  OSSEC Web User Interface - Unmaintained!!
  ☆164Updated 3 years ago
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆462Updated 10 months ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆938Updated 3 years ago
• mcholste / elsa
  Enterprise Log Search and Archive
  ☆208Updated 6 years ago
• zecure / shadowd
  The Shadow Daemon web application firewall server
  ☆298Updated 2 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆427Updated last year
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,507Updated 6 months ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆227Updated 7 years ago
• Fudge / gltail
  Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
  ☆607Updated 10 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆449Updated last year
• ironbee / ironbee
  Universal web application security sensor intended for real-time monitoring and defense.
  ☆306Updated 9 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆575Updated 4 years ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆417Updated 2 years ago
• mushorg / glastopf
  Web Application Honeypot
  ☆569Updated 6 months ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆153Updated 11 months ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆238Updated 3 years ago