Alternatives and similar repositories for scirius:

Users that are interested in scirius are comparing it to the libraries listed below

• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆443Updated this week
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆469Updated last month
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆264Updated 2 months ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆238Updated 3 years ago
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,507Updated 6 months ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆207Updated 6 years ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆425Updated 3 years ago
• defenxor / dsiem
  Security event correlation engine for ELK stack
  ☆435Updated 7 months ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆780Updated 4 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆169Updated last year
• teoseller / osquery-attck
  Mapping the MITRE ATT&CK Matrix with Osquery
  ☆787Updated last year
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆449Updated last year
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆233Updated 8 months ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆379Updated this week
• secureworks / flowsynth
  a network packet capture compiler
  ☆197Updated 2 years ago
• bammv / sguil
  Sguil client for NSM
  ☆216Updated 10 months ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆437Updated 4 months ago
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,365Updated 2 years ago
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆155Updated 3 weeks ago
• AlienVault-OTX / OTX-Python-SDK
  The Python SDK for AlienVault OTX
  ☆366Updated 9 months ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆115Updated 6 years ago
• bro / bro
  Mirror of https://github.com/zeek/zeek
  ☆173Updated last year
• armbues / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆434Updated last year
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆432Updated last year
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆283Updated last year
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆993Updated this week
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆462Updated 10 months ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆395Updated last year