Alternatives and similar repositories for elasticsplunk:

Users that are interested in elasticsplunk are comparing it to the libraries listed below

• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆175Updated 3 years ago
• hvandenb / splunk-elasticsearch
  A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI
  ☆67Updated 7 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• LiamRandall / bro-scripts
  Bro scripts to be shared with the community
  ☆109Updated 11 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆100Updated 4 years ago
• jbaggs / anomalous-dns
  A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.
  ☆33Updated last month
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆86Updated last year
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆207Updated 6 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆56Updated 9 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 4 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆240Updated 3 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated last year
• demisto / COPS
  Collaborative Open Playbook Standard
  ☆153Updated last year
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆141Updated 2 years ago
• sooshie / bro-scripts
  Various Bro scripts
  ☆96Updated 8 years ago
• rocknsm / rock-scripts
  Bro scripts for the ROCK platform. http://rocknsm.io
  ☆33Updated last year
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 3 years ago
• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆34Updated 10 months ago
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆92Updated 6 years ago
• SteveMcGrath / pySecurityCenter
  ☆101Updated 6 years ago
• michaelhidalgo / attack-to-elk
  This program exports MITRE ATT&CK framework in ELK dashboard
  ☆78Updated 2 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆178Updated 5 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆69Updated 4 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆102Updated 4 years ago
• endgameinc / eqllib
  ☆160Updated 4 years ago
• passivetotal / python_api
  Python abstract API for PassiveTotal services in the form of libraries and command line utilities.
  ☆85Updated last year
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆146Updated 3 years ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆149Updated 8 months ago