Alternatives and similar repositories for snorby:

Users that are interested in snorby are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆353Updated 11 months ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆645Updated 3 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆431Updated 3 years ago
• Fudge / gltail
  Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
  ☆607Updated 10 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆395Updated last year
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆702Updated 5 years ago
• ironbee / ironbee
  Universal web application security sensor intended for real-time monitoring and defense.
  ☆306Updated 9 years ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,692Updated 10 months ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆578Updated 5 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆438Updated 6 months ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆449Updated 3 weeks ago
• iSECPartners / sslyze
  Current development of SSLyze now takes place on a separate repository
  ☆644Updated 9 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆235Updated 10 months ago
• bammv / sguil
  Sguil client for NSM
  ☆218Updated last year
• mushorg / glastopf
  Web Application Honeypot
  ☆573Updated 8 months ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆940Updated 3 years ago
• crowbar / crowbar
  Cloud Operations Platform
  ☆761Updated 5 years ago
• jpalanco / alienvault-ossim
  Alienvault ossim
  ☆122Updated last month
• ossec / ossec-wui
  OSSEC Web User Interface - Unmaintained!!
  ☆164Updated 3 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆505Updated 2 years ago
• AlienVault-OTX / ApiV2
  Version 2 of the ThreatCrowd API
  ☆269Updated 2 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 4 years ago
• graylog-labs / graylog2-web-interface
  [DEPRECATED]
  ☆611Updated 8 years ago
• packetfu / packetfu
  PacketFu, a mid-level packet manipulation library for Ruby
  ☆384Updated last year
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆427Updated last year
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• mozilla / MozDef
  DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
  ☆2,167Updated 3 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago