Alternatives and similar repositories for snorby

Users that are interested in snorby are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆352Updated last year
• Fudge / gltail
  Real-time visualization of server traffic, events and statistics with Ruby, SSH and OpenGL
  ☆608Updated 10 years ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆437Updated 4 years ago
• ironbee / ironbee
  Universal web application security sensor intended for real-time monitoring and defense.
  ☆305Updated 9 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆657Updated this week
• seccubus / seccubus
  Easy automated vulnerability scanning, reporting and analysis
  ☆703Updated 5 years ago
• tobi / clarity
  Web interface for the grep and tail -f unix tools. Useful for real-time log analysis. Remotely related to splunk
  ☆779Updated 7 years ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆947Updated 4 years ago
• Netflix / Fido
  ☆816Updated 8 years ago
• mcholste / elsa
  Enterprise Log Search and Archive
  ☆209Updated 6 years ago
• bammv / sguil
  Sguil client for NSM
  ☆219Updated last year
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆404Updated 2 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆229Updated 4 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆455Updated 2 years ago
• mushorg / glastopf
  Web Application Honeypot
  ☆581Updated last year
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆462Updated last week
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆580Updated 5 years ago
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,712Updated last year
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• iSECPartners / sslyze
  Current development of SSLyze now takes place on a separate repository
  ☆643Updated 9 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆432Updated last year
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆507Updated 3 years ago
• graylog-labs / graylog2-web-interface
  [DEPRECATED]
  ☆610Updated 9 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 4 years ago
• pwnlandia / mhn
  Modern Honey Network
  ☆2,462Updated 8 months ago
• ciscocsirt / malspider
  Malspider is a web spidering framework that detects characteristics of web compromises.
  ☆416Updated 2 years ago
• mozilla / MozDef
  DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
  ☆2,171Updated 3 years ago
• packetfu / packetfu
  PacketFu, a mid-level packet manipulation library for Ruby
  ☆387Updated 2 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆466Updated 10 months ago