Alternatives and similar repositories for corelight-client

Users that are interested in corelight-client are comparing it to the libraries listed below

• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated last month
• corelight / Corelight-Ansible-Roles
  Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…
  ☆16Updated 4 years ago
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated 2 years ago
• ibm-xforce / xfe-node
  Node.js SDK for IBM X-Force Exchange
  ☆15Updated 7 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 7 years ago
• sensoroni / sensoroni
  Web-based sensor management suite
  ☆20Updated 2 years ago
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆31Updated last month
• wazuh / wazuh-splunk
  Wazuh - Splunk App
  ☆56Updated last year
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆37Updated 2 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆49Updated 3 years ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated last week
• wazuh / wazuh-api
  Wazuh - RESTful API
  ☆77Updated last year
• alias454 / ansible-splunk-playbook
  Install a full Splunk Enterprise Cluster or Universal forwarder using an ansible playbook
  ☆54Updated 5 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 12 years ago
• alertmanager / alert_manager
  Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features
  ☆81Updated 3 years ago
• toniblyx / SANSCloudSecuritySummit2018
  Materials used and mentioned during my talk at SANS Cloud Security Summit 2018 in San Diego
  ☆23Updated 7 years ago
• Security-Onion-Solutions / securityonion-image
  ☆52Updated last week
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 4 years ago
• ChrisYounger / git_for_splunk
  Simple versioning for your Splunk environment
  ☆37Updated last year
• phantomcyber / phantom-community-projects
  This repo represents work the Phantom Community collaborates on to build apps and learn.
  ☆13Updated 4 years ago
• opencybersecurityalliance / kestrel-jupyter
  Kestrel Jupyter Notebook Kernel
  ☆10Updated 2 years ago
• att / docker-forensics
  Tools to assist in forensicating docker
  ☆85Updated 9 months ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• jsiwek / bro_vetting
  Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.
  ☆13Updated 12 years ago
• sans-blue-team / CISSP-Notes-Card
  A collaborative CISSP notes card
  ☆39Updated 10 years ago
• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆40Updated 3 years ago
• PaloAltoNetworks / Splunk-Apps
  Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…
  ☆108Updated last year
• splunk / splunk-webframework
  Splunk Web Framework
  ☆51Updated 3 years ago
• opendxl / opendxl-console
  OpenDXL Console is a high-level web-based console for interacting with a DXL fabric
  ☆11Updated 4 years ago