Alternatives and similar repositories for metron

Users that are interested in metron are comparing it to the libraries listed below

• apache / incubator-spot
  Mirror of Apache Spot
  ☆350Updated 2 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆578Updated 5 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆454Updated last year
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆452Updated 2 years ago
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆182Updated 8 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆439Updated last year
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆855Updated 2 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆655Updated last week
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆132Updated last year
• Netflix-Skunkworks / diffy
  (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR)…
  ☆634Updated last year
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆208Updated 2 years ago
• apache / eagle
  Mirror of Apache Eagle
  ☆410Updated 4 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆459Updated 3 weeks ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆796Updated 4 years ago
• mwielgoszewski / doorman
  an osquery fleet manager
  ☆618Updated 2 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆660Updated 6 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆480Updated last month
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,384Updated 2 years ago
• TheHive-Project / Cortex
  Cortex: a Powerful Observable Analysis and Active Response Engine
  ☆1,436Updated 3 weeks ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆398Updated last year
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆455Updated 9 months ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆945Updated 4 years ago
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 5 years ago
• packetloop / packetpig
  Packetpig - Open Source Big Data Security Analytics
  ☆298Updated 7 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆279Updated last year
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 9 years ago
• kolide / fleet
  A flexible control server for osquery fleets
  ☆1,105Updated 4 years ago
• OTRF / OSSEM
  Open Source Security Events Metadata (OSSEM)
  ☆1,272Updated 2 years ago