Alternatives and similar repositories for logminer

Users that are interested in logminer are comparing it to the libraries listed below

• salspaugh / splparser
  Simple parser for Splunk Processing Language (SPL) written in Python.
  ☆35Updated 7 years ago
• bez0r / BeaconBits
  Network timing evaluation used to detect beacons, works with argus flow as the source
  ☆20Updated 9 years ago
• morrigan / user-behavior-anomaly-detector
  User anomaly detector based on logs generated by Osquery framework and machine learning to process those logs.
  ☆33Updated 8 years ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆209Updated 2 years ago
• Anonymity94 / spl2dsl
  Convert Splunk SPL to Elasticsearch DSL with pegjs
  ☆13Updated 3 years ago
• sshahriyar / totalads
  Total Anomaly Detection System for software logs and traces
  ☆10Updated 9 years ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• Egida-Kassandra / kassandra
  Analysis of HTTP traffic and detection of anomalous user behavior in allowed actions. UEBA system.
  ☆22Updated 2 years ago
• chenryn / ESPL
  Elastic Search Processing Language
  ☆49Updated 8 years ago
• NybbleHub / Bluekeep-Detection-Rule
  Bluekeep detection rule by using Apache Flink CEP (Complex Event Processing) Library and Markov Chain.
  ☆9Updated 5 years ago
• vishal1991 / Network-Forensics
  • Packet capture (PCAP) file analysis to analyze traffic sent by malicious IP address.
  ☆12Updated 10 years ago
• CiscoCTA / taxii-log-adapter
  Integration between SIEMs and TAXII services
  ☆10Updated 2 years ago
• gy-games / shield
  基于Strom的日志实时流量分析主动防御(CCFirewall)系统
  ☆71Updated 7 years ago
• carolynduby / ApacheMetronWorkshop
  Apache Metron Workshop Lab materials and instructions.
  ☆35Updated 5 years ago
• sethhall / domain-tld
  Zeek script library for getting the effective TLD of a domain.
  ☆14Updated last year
• kiwiz / esquery
  Elasticsearch querying library
  ☆20Updated 6 years ago
• ElasticSA / elsec_dr2an
  Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).
  ☆20Updated 2 years ago
• query-ai / queryai-kibana-plugin
  Query.AI plugin for Kibana
  ☆13Updated 5 years ago
• 0xrawsec / gene-rules
  ☆41Updated 2 years ago
• abzcoding / aptdetector
  Advanced Persistent Threat Detection Using Network Analysis
  ☆22Updated 6 years ago
• corelight / got_zoom
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Updated 5 years ago
• ssallys / p3
  An open source pcap packet and NetFlow file analysis tool using Hadoop MapReduce and Hive.
  ☆44Updated 11 years ago
• surajr / URL-Classification
  Machine learning to classify Malicious (Spam)/Benign URL's
  ☆130Updated 4 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆105Updated 4 years ago
• OpenSOC / opensoc-ui
  User interface for OpenSOC
  ☆100Updated 9 years ago
• childe / dopey
  ES索引的维护脚本, 每天close delete reallocate optimize索引
  ☆23Updated 6 years ago
• variationalkk / User-and-Entity-Behavior-Analytics-UEBA
  User and Entity Behavior Analytics by deep learning
  ☆112Updated 4 years ago
• jazwiecki / neo4j-cve
  Graph database version of the CVE database
  ☆26Updated 2 years ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆43Updated 8 years ago
• theY4Kman / parsuricata
  Parse Suricata rules
  ☆13Updated last year