🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM
☆146Jul 21, 2026Updated 2 months ago
Alternatives and similar repositories for awesome-wazuh
Users that are interested in awesome-wazuh are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rules and decoders for Wazuh to process the syslog from Sophos firewalls☆26Sep 16, 2026Updated last month
- Send wazuh alert to telegram by telegram bot.☆15Nov 26, 2022Updated 3 years ago
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,407Mar 11, 2026Updated 7 months ago
- Sigma to Wazuh rule converter☆24Apr 28, 2026Updated 5 months ago
- ☆17Oct 28, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open source HIDS tailored for Microsoft Windows and Active Directory☆31Jul 23, 2026Updated 2 months ago
- Personal scripts☆15Sep 11, 2024Updated 2 years ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆62Feb 18, 2026Updated 8 months ago
- ☆21Jan 20, 2023Updated 3 years ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆89Aug 12, 2026Updated 2 months ago
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆14Mar 19, 2026Updated 6 months ago
- ☆33Aug 22, 2026Updated last month
- Decoders and Rules for Fortigate in Wazuh☆78Mar 26, 2024Updated 2 years ago
- A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based be…☆277Oct 7, 2026Updated last week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆334Dec 31, 2025Updated 9 months ago
- Tools for Wazuh by Juan C. Tello☆17Jan 13, 2022Updated 4 years ago
- Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.☆374Updated this week
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆78Oct 8, 2026Updated last week
- ☆20Jul 30, 2026Updated 2 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆34Sep 26, 2024Updated 2 years ago
- Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag a…☆212Feb 26, 2026Updated 7 months ago
- Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PC…☆252Updated this week
- NavSec is the most comprehensive passive web vulnerability and privacy scanner. It performs real-time security analysis directly in your …☆24Sep 13, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Linux defense. Your host. Your rules. Host-local Linux defense with auditable, fail-closed enforcement.☆394Updated this week
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 6 months ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- Security Monitoring using Wazuh, published by Packt☆45Apr 22, 2026Updated 5 months ago
- Troubleshooting MDE Workstations☆51Oct 7, 2026Updated last week
- Adversary tradecraft detection, protection, and hunting☆15May 8, 2026Updated 5 months ago
- A Windows-native control plane for Microsoft Intune & Entra device management. Rust + WinUI 3 client over a .NET Graph sidecar, with a se…☆36Jul 30, 2026Updated 2 months ago
- Python scripts to convert PfSense and OPNSense firewall rules into a graphical view of the flows.☆440Mar 10, 2026Updated 7 months ago
- Active Directory Cheat Sheet☆208May 7, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆36Nov 27, 2025Updated 10 months ago
- Android app that turns a MikroTik RouterBoard into a cable testing probe. Run link status, TDR cable tests, speed tests, and generate PDF…☆35Oct 5, 2026Updated last week
- ☆11Jan 12, 2023Updated 3 years ago
- PowerShell toolkit for deploying Microsoft 365 Apps, Visio, Project, language packs, and proofing tools via Intune Win32 apps.☆19Sep 11, 2026Updated last month
- A method for parsing Snort Barnyard2 logs from pfSense in Graylog☆10May 26, 2020Updated 6 years ago
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆486Feb 16, 2026Updated 8 months ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 11 months ago