Alternatives and similar repositories for SELKS:

Users that are interested in SELKS are comparing it to the libraries listed below

• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆638Updated last month
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,022Updated this week
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,507Updated 6 months ago
• alphasoc / flightsim
  A utility to safely generate malicious network traffic patterns and evaluate controls.
  ☆1,278Updated 9 months ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆438Updated last week
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,785Updated this week
• ptresearch / AttackDetection
  Attack Detection
  ☆1,347Updated 2 years ago
• OISF / suricata
  Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OIS…
  ☆4,861Updated this week
• Security-Onion-Solutions / securityonion
  Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own in…
  ☆3,402Updated this week
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,800Updated 6 months ago
• stratosphereips / StratosphereLinuxIPS
  Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors i…
  ☆729Updated this week
• TheHive-Project / Cortex
  Cortex: a Powerful Observable Analysis and Active Response Engine
  ☆1,361Updated 2 months ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆373Updated last week
• olafhartong / sysmon-modular
  A repository of sysmon configuration modules
  ☆2,700Updated 4 months ago
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,168Updated last year
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,444Updated last month
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,362Updated 2 years ago
• wazuh / wazuh-docker
  Wazuh - Docker containers
  ☆745Updated this week
• TheHive-Project / TheHive
  TheHive: a Scalable, Open Source and Free Security Incident Response Platform
  ☆3,504Updated 2 years ago
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,058Updated this week
• Neo23x0 / signature-base
  YARA signature and IOC database for my scanners and tools
  ☆2,525Updated last month
• InQuest / awesome-yara
  A curated list of awesome YARA rules, tools, and people.
  ☆3,646Updated 2 months ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆262Updated last month
• snort3 / snort3
  Snort++
  ☆2,671Updated 2 weeks ago
• ossec / ossec-hids
  OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, roo…
  ☆4,559Updated last week
• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,084Updated 3 years ago
• ComodoSecurity / openedr
  Open EDR public repository
  ☆2,324Updated last year
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆430Updated 3 months ago
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆269Updated last month
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆989Updated this week