Alternatives and similar repositories for corelight-client

Users that are interested in corelight-client are comparing it to the libraries listed below

• ibm-xforce / xfe-node
  Node.js SDK for IBM X-Force Exchange
  ☆14Updated 7 years ago
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆30Updated last month
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated 2 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated 2 months ago
• opendxl / opendxl-console
  OpenDXL Console is a high-level web-based console for interacting with a DXL fabric
  ☆11Updated 4 years ago
• corelight / Corelight-Ansible-Roles
  Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…
  ☆16Updated 4 years ago
• wazuh / wazuh-api
  Wazuh - RESTful API
  ☆76Updated 11 months ago
• sensoroni / sensoroni
  Web-based sensor management suite
  ☆20Updated 2 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆48Updated 2 years ago
• opendxl / opendxl-environment
  Pre-configured environment that supports the development and running of OpenDXL solutions
  ☆13Updated 4 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 6 years ago
• Security-Onion-Solutions / securityonion-docker
  Docker files for Security Onion
  ☆42Updated 4 years ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• toniblyx / SANSCloudSecuritySummit2018
  Materials used and mentioned during my talk at SANS Cloud Security Summit 2018 in San Diego
  ☆23Updated 7 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• autostructure / secure_windows
  Puppet module that hardens Windows Server to DoD STIG compliance
  ☆14Updated 5 years ago
• att / docker-forensics
  Tools to assist in forensicating docker
  ☆84Updated 5 months ago
• rocknsm / rock-dashboards
  Dashboards and loader for ROCK NSM dashboards
  ☆49Updated 2 years ago
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated this week
• jsiwek / bro_vetting
  Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.
  ☆13Updated 12 years ago
• Security-Onion-Solutions / securityonion-image
  ☆49Updated last week
• usnistgov / sctools
  Tools for security content automation, baseline tailoring, and overlay development.
  ☆44Updated 11 months ago
• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆39Updated 3 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆56Updated 11 months ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• outcoldman / awesome-splunk
  A curated list of awesome Splunk links
  ☆40Updated 9 years ago
• empow / logstash-parsers
  ☆38Updated 5 years ago
• phantomcyber / phantom-community-projects
  This repo represents work the Phantom Community collaborates on to build apps and learn.
  ☆13Updated 4 years ago
• 0xl3x1 / zeek-EternalSafety
  Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.
  ☆19Updated this week
• gchq / event-logging-schema
  Event Logging is an XML Schema for describing the auditable events generated by computer systems, hardware devices and access control sys…
  ☆26Updated 3 months ago