Alternatives and similar repositories for metron

Users that are interested in metron are comparing it to the libraries listed below

• apache / incubator-spot
  Mirror of Apache Spot
  ☆354Updated 2 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆582Updated 5 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆60Updated 5 years ago
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆456Updated 3 years ago
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆183Updated 8 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆134Updated 2 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆671Updated 2 weeks ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆456Updated 2 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆451Updated last year
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆660Updated 6 years ago
• GACWR / OpenUBA
  A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…
  ☆462Updated last year
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆208Updated 2 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 10 years ago
• CSIRT-MU / Stream4Flow
  A framework for the real-time network traffic analysis based on world-leading technologies for distributed stream processing, network tra…
  ☆102Updated 4 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• TAXIIProject / java-taxii
  A Java library for handling TAXII Messages and invoking TAXII Services.
  ☆20Updated 6 years ago
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆876Updated 4 months ago
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆908Updated 6 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆478Updated this week
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 6 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆283Updated 5 months ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆510Updated last month
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆945Updated 4 years ago
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,394Updated 3 years ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆241Updated 4 years ago
• mwielgoszewski / doorman
  an osquery fleet manager
  ☆618Updated 3 years ago
• dlumbrer / kbn_network
  Network Plugin for Kibana
  ☆368Updated 2 years ago
• SeisoLLC / zeek-kafka
  A Zeek log writer plugin that publishes to Kafka.
  ☆52Updated 4 months ago
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆354Updated last year
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆1,107Updated last month