Alternatives and similar repositories for metron

Users that are interested in metron are comparing it to the libraries listed below

• apache / incubator-spot
  Mirror of Apache Spot
  ☆353Updated 2 years ago
• OpenSOC / opensoc
  OpenSOC Apache Hadoop Code
  ☆579Updated 5 years ago
• Open-Network-Insight / open-network-insight
  ONI development has been moved into Apache Software Foundation - Apache Spot (incubating) http://spot.apache.org/
  ☆183Updated 8 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆60Updated 5 years ago
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆456Updated 2 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆134Updated last year
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆658Updated 6 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆448Updated last year
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆667Updated last month
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆455Updated 2 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆470Updated last week
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆282Updated 3 months ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 10 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆502Updated last month
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆209Updated 2 years ago
• TAXIIProject / java-taxii
  A Java library for handling TAXII Messages and invoking TAXII Services.
  ☆20Updated 6 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆441Updated 4 years ago
• dlumbrer / kbn_network
  Network Plugin for Kibana
  ☆369Updated 2 years ago
• GACWR / OpenUBA
  A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…
  ☆457Updated last year
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆867Updated last month
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆487Updated last year
• crits / crits
  CRITs - Collaborative Research Into Threats
  ☆906Updated 6 years ago
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 5 years ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆240Updated 4 years ago
• CSIRT-MU / Stream4Flow
  A framework for the real-time network traffic analysis based on world-leading technologies for distributed stream processing, network tra…
  ☆102Updated 4 years ago
• HASecuritySolutions / VulnWhisperer
  Create actionable data from your Vulnerability Scans
  ☆1,390Updated 2 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆248Updated last year
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆354Updated last year
• defenxor / dsiem
  Security event correlation engine for ELK stack
  ☆447Updated last year