alienfault / ossim
Open Source Security Information and event Management
☆79Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for ossim
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆98Updated 3 years ago
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 4 years ago
- Suricata rules for network anomaly detection☆153Updated 2 months ago
- Mapping NSM rules to MITRE ATT&CK☆68Updated 4 years ago
- Suricata rules for the new critical vulnerabilities☆79Updated 3 years ago
- Apache Metron☆59Updated 4 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆106Updated 6 months ago
- Zeek IDS Dockerfile☆99Updated last year
- A repository for OSSEC rules and decoders☆51Updated last year
- A set of ICS IDS rules for use with Suricata.☆46Updated last year
- Suricata and Snort IDS rule and pcap testing system☆449Updated 2 weeks ago
- zeek-scripts☆41Updated 5 years ago
- Mirror of https://github.com/zeek/zeek☆167Updated last year
- Digital Bond's IDS/IPS rules for ICS and ICS protocols.☆138Updated 4 years ago
- ☆99Updated 10 years ago
- Suricata Verification Tests - Testing Suricata Output☆102Updated this week
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆20Updated last year
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆76Updated 3 weeks ago
- Open Source SIEM (Security Information and Event Management system).☆197Updated last year
- Suricata IDS/IPS log analytics using the Elastic Stack.☆231Updated 3 years ago
- ☆42Updated last year
- Passive Real-time Asset Detection System☆231Updated 5 months ago
- The tool for updating your Suricata rules.☆254Updated 4 months ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- Explore Indicators of Compromise Automatically☆94Updated 4 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆164Updated last year
- MozDef: The Mozilla Defense Platform☆67Updated 4 years ago
- a network packet capture compiler☆192Updated 2 years ago
- Scirius is a web application for Suricata ruleset management and threat hunting.☆633Updated 3 weeks ago