Alternatives and similar repositories for metron

Users that are interested in metron are comparing it to the libraries listed below

• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆578Updated 5 years ago
• apache / incubator-spot
  Mirror of Apache Spot
  ☆351Updated 2 years ago
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆451Updated 2 years ago
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆183Updated 8 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆659Updated 6 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆132Updated last year
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆435Updated last year
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆901Updated 5 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆649Updated 3 weeks ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆397Updated last year
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆847Updated 2 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 9 years ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆209Updated last year
• apache / eagle
  Mirror of Apache Eagle
  ☆410Updated 4 years ago
• DavidJBianco / Clearcut
  Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review
  ☆197Updated 8 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆789Updated 4 years ago
• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆253Updated 3 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆464Updated 6 years ago
• AlienVault-OTX / OTX-Python-SDK
  The Python SDK for AlienVault OTX
  ☆373Updated last year
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆279Updated last year
• phantomcyber / playbooks
  Phantom Community Playbooks
  ☆500Updated 3 months ago
• EmersonElectricCo / fsf
  File Scanning Framework
  ☆292Updated 3 years ago
• HurricaneLabs / machinae
  Machinae Security Intelligence Collector
  ☆512Updated last year
• teoseller / osquery-attck
  Mapping the MITRE ATT&CK Matrix with Osquery
  ☆791Updated 2 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆430Updated last year
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆745Updated 4 months ago
• blacktop / docker-cuckoo
  Cuckoo Sandbox Dockerfile
  ☆327Updated 5 years ago