airbus-cyber / graylog-plugin-logging-alert

Related projects ⓘ

Alternatives and complementary repositories for graylog-plugin-logging-alert

• airbus-cyber / graylog-plugin-aggregation-count
  Alert condition plugin for Graylog to perform aggregation
  ☆20Updated last year
• airbus-cyber / graylog-plugin-correlation-count
  Alert condition plugin for Graylog to perform correlation
  ☆24Updated 2 weeks ago
• airbus-cyber / graylog-plugin-alert-wizard
  Alert Wizard plugin for Graylog to manage the alert rules
  ☆47Updated this week
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 3 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆50Updated 2 months ago
• ipworkx / ecs-suricata
  ☆12Updated 4 years ago
• billmurrin / graylog-plugin-slookup-function
  Stream Lookup function for GrayLog2 Pipeline Processor
  ☆14Updated 3 years ago
• StamusNetworks / KTS7
  Kibana 7 Templates for Suricata IDPS Threat Hunting
  ☆39Updated 2 years ago
• wizecore / graylog2-output-syslog
  Customizable, production ready syslog and ArcSight output plugin for Graylog
  ☆40Updated 4 months ago
• alertflex / altprobe
  collector/runner
  ☆65Updated last year
• HKcyberstark / wazuh-ecs
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆27Updated 4 years ago
• opc40772 / suricata-graylog
  ☆23Updated 5 years ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆150Updated 8 months ago
• billmurrin / graylog-plugin-quickvaluesplus-widget
  GrayLog2 QuickValuesPlus Widget
  ☆22Updated 5 years ago
• enotspe / fortinet-2-elasticsearch
  Fortinet products logs to Elasticsearch
  ☆89Updated 2 months ago
• robcowart / synesis_lite_snort
  Snort IDS/IPS log analytics using the Elastic Stack.
  ☆82Updated 3 years ago
• siemonster / logstash
  Example configuration files for Logstash
  ☆45Updated 5 years ago
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆29Updated 2 years ago
• Graylog2 / graylog-guide-snort
  How to send structured Snort IDS alert logs into Graylog
  ☆27Updated last year
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆61Updated 3 years ago
• Nclose-ZA / elastalert_hive_alerter
  This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
  ☆27Updated 3 years ago
• corelight / json-streaming-logs
  Bro script package to create JSON formatted logs to stream into data analysis systems.
  ☆28Updated 11 months ago
• theflakes / sigma_to_wazuh
  Convert Sigma rules to Wazuh rules
  ☆58Updated 7 months ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆72Updated 3 months ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆34Updated last year
• empow / logstash-parsers
  ☆37Updated 5 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆100Updated 5 months ago
• jctello / JCT-Wazuh
  Tools for Wazuh by Juan C. Tello
  ☆14Updated 2 years ago
• juju4 / ansible-zeek
  setup zeek, previously Bro IDS
  ☆17Updated 3 weeks ago
• thomaspatzke / logstash-linux
  Logstash Configuration for Linux Logs (Authentication, Apache, Mail)
  ☆92Updated 5 years ago