Alternatives and similar repositories for snorby:

Users that are interested in snorby are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆353Updated last year
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆433Updated 3 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆648Updated this week
• Fudge / gltail
  Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
  ☆607Updated 10 years ago
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆701Updated 5 years ago
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 4 years ago
• bammv / sguil
  Sguil client for NSM
  ☆218Updated last year
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆400Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆237Updated 10 months ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆506Updated 2 years ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,692Updated 10 months ago
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,525Updated 8 months ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• biggiesmallsAG / nightHawkResponse
  Incident Response Forensic Framework
  ☆600Updated 5 years ago
• mushorg / glastopf
  Web Application Honeypot
  ☆573Updated 8 months ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• ossec / ossec-wui
  OSSEC Web User Interface - Unmaintained!!
  ☆164Updated 3 years ago
• ironbee / ironbee
  Universal web application security sensor intended for real-time monitoring and defense.
  ☆306Updated 9 years ago
• desaster / kippo
  Kippo - SSH Honeypot
  ☆1,673Updated last year
• tnich / honssh
  HonSSH is designed to log all SSH communications between a client and server.
  ☆375Updated 3 years ago
• iSECPartners / sslyze
  Current development of SSLyze now takes place on a separate repository
  ☆643Updated 9 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆429Updated last year
• phin3has / mailoney
  An SMTP Honeypot
  ☆264Updated last week
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆455Updated 2 weeks ago
• zecure / shadowd
  The Shadow Daemon web application firewall server
  ☆299Updated 2 years ago
• BinaryDefense / artillery
  The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
  ☆1,017Updated 3 years ago
• mcholste / elsa
  Enterprise Log Search and Archive
  ☆209Updated 6 years ago
• CiscoCXSecurity / NeoPI
  ☆480Updated 3 years ago