Alternatives and similar repositories for corelight-client

Users that are interested in corelight-client are comparing it to the libraries listed below

• ibm-xforce / xfe-node
  Node.js SDK for IBM X-Force Exchange
  ☆15Updated 7 years ago
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆31Updated 2 months ago
• Security-Onion-Solutions / securityonion-docker
  Docker files for Security Onion
  ☆42Updated 4 years ago
• opendxl / opendxl-console
  OpenDXL Console is a high-level web-based console for interacting with a DXL fabric
  ☆11Updated 4 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated last week
• toniblyx / SANSCloudSecuritySummit2018
  Materials used and mentioned during my talk at SANS Cloud Security Summit 2018 in San Diego
  ☆23Updated 7 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 6 years ago
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated 2 years ago
• wazuh / wazuh-api
  Wazuh - RESTful API
  ☆76Updated 11 months ago
• jsiwek / bro_vetting
  Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.
  ☆13Updated 12 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆36Updated 2 years ago
• corelight / Corelight-Ansible-Roles
  Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…
  ☆16Updated 4 years ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated this week
• att / docker-forensics
  Tools to assist in forensicating docker
  ☆84Updated 6 months ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆48Updated 2 years ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• mozilla / security
  Repository for various tools around security
  ☆41Updated last year
• Security-Onion-Solutions / securityonion-setup
  ☆36Updated 4 years ago
• 0xl3x1 / zeek-EternalSafety
  Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.
  ☆19Updated 3 weeks ago
• phantomcyber / phantom-community-projects
  This repo represents work the Phantom Community collaborates on to build apps and learn.
  ☆13Updated 4 years ago
• sensoroni / sensoroni
  Web-based sensor management suite
  ☆20Updated 2 years ago
• opendxl / opendxl-environment
  Pre-configured environment that supports the development and running of OpenDXL solutions
  ☆13Updated 4 years ago
• opencybersecurityalliance / ontology
  The OpenDXL Ontology project is focused on the development of an open and interoperable cybersecurity messaging format for use with the O…
  ☆76Updated 4 years ago
• alertmanager / alert_manager
  Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features
  ☆81Updated 3 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 5 years ago
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆56Updated 11 months ago
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆88Updated 6 years ago
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated last week