Alternatives and similar repositories for incubator-spot

Users that are interested in incubator-spot are comparing it to the libraries listed below

• apache / metron
  Apache Metron
  ☆859Updated this week
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆182Updated 8 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆578Updated 5 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆132Updated last year
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 9 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆282Updated last year
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆183Updated 2 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆243Updated last year
• secureworks / flowsynth
  a network packet capture compiler
  ☆200Updated 3 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆654Updated last week
• packetloop / packetpig
  Packetpig - Open Source Big Data Security Analytics
  ☆298Updated 7 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• STIXProject / python-stix
  A Python library for parsing, manipulating, and generating STIX content.
  ☆245Updated 3 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆480Updated last month
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆454Updated last year
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 5 years ago
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆452Updated 2 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆279Updated last year
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆208Updated 2 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆459Updated 3 weeks ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆210Updated 7 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆439Updated last year
• OpenSOC / opensoc-vagrant
  Vagrantfile and scripts for building a disposable OpenSOC Cluster
  ☆29Updated 8 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• dirtbags / pcapdb
  A Distributed, Search-Optimized Full Packet Capture System
  ☆242Updated 2 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 3 years ago