Alternatives and similar repositories for Clear-NDR-ISO

Users that are interested in Clear-NDR-ISO are comparing it to the libraries listed below

• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆670Updated 3 months ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,302Updated last week
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆477Updated this week
• TheHive-Project / Cortex
  Cortex: a Powerful Observable Analysis and Active Response Engine
  ☆1,524Updated last month
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,940Updated last month
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆309Updated last month
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆510Updated 3 weeks ago
• stratosphereips / StratosphereLinuxIPS
  Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors i…
  ☆852Updated last week
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆448Updated this week
• DinoTools / dionaea
  Home of the dionaea honeypot
  ☆783Updated last year
• Security-Onion-Solutions / securityonion
  Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own in…
  ☆4,248Updated this week
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆285Updated last month
• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,109Updated 4 years ago
• alphasoc / flightsim
  A utility to safely generate malicious network traffic patterns and evaluate controls.
  ☆1,346Updated last year
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆494Updated last year
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,510Updated last year
• pwnlandia / mhn
  Modern Honey Network
  ☆2,467Updated last year
• wazuh / wazuh-docker
  Wazuh - Docker containers
  ☆991Updated last week
• Shuffle / Shuffle
  Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
  ☆2,120Updated last week
• TheHive-Project / TheHive
  TheHive is a Collaborative Case Management Platform, now distributed as a commercial version
  ☆3,873Updated 5 months ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆241Updated 4 years ago
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆3,028Updated 2 months ago
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,394Updated 2 years ago
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,635Updated this week
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆1,102Updated 3 weeks ago
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,294Updated 2 years ago
• ptresearch / AttackDetection
  Attack Detection
  ☆1,360Updated 3 years ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆442Updated 4 years ago
• thinkst / opencanary
  Modular and decentralised honeypot
  ☆2,714Updated 2 weeks ago
• philhagen / sof-elk
  Configuration files for the SOF-ELK VM
  ☆1,705Updated 2 weeks ago