Alternatives and similar repositories for logminer

Users that are interested in logminer are comparing it to the libraries listed below

• salspaugh / splparser
  Simple parser for Splunk Processing Language (SPL) written in Python.
  ☆35Updated 7 years ago
• Anonymity94 / spl2dsl
  Convert Splunk SPL to Elasticsearch DSL with pegjs
  ☆13Updated 3 years ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆208Updated 2 years ago
• query-ai / queryai-kibana-plugin
  Query.AI plugin for Kibana
  ☆13Updated 6 years ago
• morrigan / user-behavior-anomaly-detector
  User anomaly detector based on logs generated by Osquery framework and machine learning to process those logs.
  ☆33Updated 8 years ago
• chenryn / ESPL
  Elastic Search Processing Language
  ☆50Updated 9 years ago
• bez0r / BeaconBits
  Network timing evaluation used to detect beacons, works with argus flow as the source
  ☆20Updated 9 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆60Updated 5 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 10 years ago
• Egida-Kassandra / kassandra
  Analysis of HTTP traffic and detection of anomalous user behavior in allowed actions. UEBA system.
  ☆24Updated 2 years ago
• uniberg / kbn_sankey_vis
  Sankey diagram for Kibana visualize.
  ☆32Updated last year
• childe / dopey
  ES索引的维护脚本, 每天close delete reallocate optimize索引
  ☆23Updated 6 years ago
• OpenSOC / opensoc-streaming
  Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.
  ☆134Updated 2 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆106Updated 5 years ago
• mylamour / DGADomain
  dga classification with fasttext
  ☆13Updated 7 years ago
• CSIRT-MU / Stream4Flow
  A framework for the real-time network traffic analysis based on world-leading technologies for distributed stream processing, network tra…
  ☆102Updated 4 years ago
• ExpediaGroup / adaptive-alerting
  Anomaly detection for streaming time series, featuring automated model selection.
  ☆211Updated last year
• endgameinc / eql
  ☆225Updated last month
• variationalkk / User-and-Entity-Behavior-Analytics-UEBA
  User and Entity Behavior Analytics by deep learning
  ☆119Updated 4 years ago
• OTRF / openhunt
  ☆35Updated 4 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆73Updated 5 years ago
• corelight / got_zoom
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Updated 5 years ago
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆54Updated 2 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆33Updated 2 months ago
• kiwiz / esquery
  Elasticsearch querying library
  ☆20Updated 6 years ago
• philarkwright / DGA-Detection
  DGA Domain Detection using Bigram Frequency Analysis
  ☆54Updated 8 years ago
• corelight / log-add-http-post-bodies
  Add POST body excerpt to Bro's HTTP log
  ☆14Updated last month
• theY4Kman / parsuricata
  Parse Suricata rules
  ☆13Updated 2 years ago
• abzcoding / aptdetector
  Advanced Persistent Threat Detection Using Network Analysis
  ☆23Updated 6 years ago
• paypal / yurita
  Anomaly detection framework @ PayPal
  ☆108Updated 6 years ago