Alternatives and similar repositories for corelight-client

Users that are interested in corelight-client are comparing it to the libraries listed below

• ibm-xforce / xfe-node
  Node.js SDK for IBM X-Force Exchange
  ☆14Updated 6 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆35Updated last year
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆30Updated 4 months ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• jsiwek / bro_vetting
  Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.
  ☆13Updated 11 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated this week
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated 2 weeks ago
• outcoldman / awesome-splunk
  A curated list of awesome Splunk links
  ☆40Updated 9 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆47Updated 2 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆55Updated 9 months ago
• corelight / json-streaming-logs
  Bro script package to create JSON formatted logs to stream into data analysis systems.
  ☆28Updated last year
• zeek / zeekctl
  Tool for managing Zeek deployments.
  ☆56Updated 3 weeks ago
• 0xl3x1 / zeek-EternalSafety
  Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.
  ☆19Updated 3 years ago
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated last year
• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆39Updated 3 years ago
• rocknsm / rock-dashboards
  Dashboards and loader for ROCK NSM dashboards
  ☆48Updated 2 years ago
• corelight / Corelight-Ansible-Roles
  Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…
  ☆16Updated 4 years ago
• alias454 / ansible-splunk-playbook
  Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook
  ☆52Updated 5 years ago
• Security-Onion-Solutions / securityonion-cloud
  ☆33Updated 2 years ago
• sans-blue-team / CISSP-Notes-Card
  A collaborative CISSP notes card
  ☆40Updated 9 years ago
• corelight / pycommunityid
  A Python implementation of the Community ID flow hashing standard
  ☆23Updated last year
• wazuh / wazuh-chef
  Wazuh - Chef cookbooks
  ☆22Updated last year
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆28Updated 2 years ago
• Security-Onion-Solutions / securityonion-docker
  Docker files for Security Onion
  ☆41Updated 4 years ago
• toniblyx / SANSCloudSecuritySummit2018
  Materials used and mentioned during my talk at SANS Cloud Security Summit 2018 in San Diego
  ☆23Updated 7 years ago
• opencybersecurityalliance / kestrel-jupyter
  Kestrel Jupyter Notebook Kernel
  ☆9Updated last year
• ThreatConnect-Inc / threatconnect-playbooks
  Community driven repository of Playbooks and Apps for ThreatConnect.
  ☆71Updated 4 months ago
• corelight / got_zoom
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Updated 5 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆51Updated 5 months ago