Alternatives and similar repositories for metron:

Users that are interested in metron are comparing it to the libraries listed below

• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆575Updated 4 years ago
• apache / incubator-spot
  Mirror of Apache Spot
  ☆349Updated last year
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆449Updated 2 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆448Updated last year
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆131Updated last year
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆183Updated 7 years ago
• apache / eagle
  Mirror of Apache Eagle
  ☆409Updated 4 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆639Updated last month
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆438Updated this week
• mwielgoszewski / doorman
  an osquery fleet manager
  ☆619Updated 2 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆657Updated 5 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆432Updated last year
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆207Updated last year
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 9 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆67Updated 4 years ago
• GACWR / OpenUBA
  A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…
  ☆408Updated 9 months ago
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆837Updated 2 years ago
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,364Updated 2 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆465Updated 3 weeks ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆896Updated 5 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆432Updated 4 months ago
• phantomcyber / playbooks
  Phantom Community Playbooks
  ☆483Updated this week
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆237Updated 3 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆744Updated last month
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 5 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆227Updated 7 years ago
• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆253Updated 3 years ago