Alternatives and similar repositories for zui:

Users that are interested in zui are comparing it to the libraries listed below

• brimdata / super
  An analytics database that puts JSON and relational tables on equal footing
  ☆1,459Updated this week
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,095Updated 2 weeks ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,508Updated 9 months ago
• alphasoc / flightsim
  A utility to safely generate malicious network traffic patterns and evaluate controls.
  ☆1,301Updated last year
• 0xrawsec / whids
  Open Source EDR for Windows
  ☆1,210Updated 2 years ago
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,108Updated 3 weeks ago
• Srinivas11789 / PcapXray
  PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highli…
  ☆1,717Updated 3 years ago
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,875Updated 9 months ago
• yampelo / beagle
  Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
  ☆1,287Updated 2 years ago
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆6,803Updated this week
• ION28 / BLUESPAWN
  An Active Defense and EDR software to empower Blue Teams
  ☆1,271Updated last year
• arkime / arkime
  Arkime is an open source, large scale, full packet capturing, indexing, and database system.
  ☆6,585Updated this week
• Cyb3rWard0g / HELK
  The Hunting ELK
  ☆3,821Updated 10 months ago
• outflanknl / RedELK
  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…
  ☆2,447Updated 2 months ago
• nshalabi / SysmonTools
  Utilities for Sysmon
  ☆1,513Updated last month
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,516Updated 4 months ago
• honeytrap / honeytrap
  Advanced Honeypot framework.
  ☆1,246Updated last year
• ComodoSecurity / openedr
  Open EDR public repository
  ☆2,404Updated last year
• mitre-attack / attack-navigator
  Web app that provides basic navigation and annotation of ATT&CK matrices
  ☆2,110Updated last week
• mitre / cti
  Cyber Threat Intelligence Repository expressed in STIX 2.0
  ☆1,836Updated 5 months ago
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆920Updated this week
• NextronSystems / APTSimulator
  A toolset to make a system look as if it was the victim of an APT attack
  ☆2,568Updated last year
• TheHive-Project / TheHive
  TheHive: a Scalable, Open Source and Free Security Incident Response Platform
  ☆3,619Updated 2 years ago
• sbousseaden / EVTX-ATTACK-SAMPLES
  Windows Events Attack Samples
  ☆2,340Updated 2 years ago
• microsoft / SysmonForLinux
  Sysmon for Linux
  ☆1,862Updated 3 weeks ago
• OTRF / Security-Datasets
  Re-play Security Events
  ☆1,635Updated last year
• mattnotmax / cyberchef-recipes
  A list of cyber-chef recipes and curated links
  ☆2,073Updated 10 months ago
• rabobank-cdc / DeTTECT
  Detect Tactics, Techniques & Combat Threats
  ☆2,141Updated 2 months ago
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,843Updated this week
• correlatedsecurity / Awesome-SOAR
  A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.
  ☆857Updated 7 months ago