Alternatives and similar repositories for ELK-forensics

Users that are interested in ELK-forensics are comparing it to the libraries listed below

• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 6 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆146Updated 4 years ago
• open-nsm / ContainNSM
  Dockerfiles for NSM tools
  ☆84Updated 8 years ago
• pevma / rule2alert
  Improvements of/over the original rule2alert
  ☆56Updated 10 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• criticalstack / bro-scripts
  ☆71Updated 3 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆77Updated 9 years ago
• LiamRandall / bro-scripts
  Bro scripts to be shared with the community
  ☆109Updated 12 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆124Updated 9 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 4 years ago
• jonschipp / ISLET
  Isolated, Scalable, & Lightweight Environment for Training
  ☆111Updated 5 years ago
• syphon1c / Threatelligence
  Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…
  ☆148Updated 11 years ago
• sooshie / bro-scripts
  Various Bro scripts
  ☆96Updated 8 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆57Updated 9 years ago
• teamdfir / sift-bootstrap
  SIFT Bootstrap Script
  ☆145Updated 8 years ago
• abusesa / abusehelper
  A framework for receiving and redistributing abuse feeds
  ☆124Updated 5 years ago
• crits / crits_services
  CRITs Services Collection
  ☆184Updated 4 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆182Updated 2 years ago
• maltelligence / maltelligence
  a Malware/Threat Analyst Desktop
  ☆89Updated 9 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• jonschipp / bro-scripts
  A collection of Bro scripts I've written
  ☆40Updated 10 years ago
• hillar / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch
  ☆61Updated 8 years ago
• vmware-archive / cbapi
  Carbon Black API Resources
  ☆93Updated 7 years ago
• ministryofpromise / tlp
  threat language parser
  ☆60Updated 10 years ago
• IBM / data-import
  ☆48Updated 9 years ago
• daveherrald / botsv1
  Splunk Boss of the SOC v1 data set.
  ☆111Updated 7 years ago
• PaloAltoNetworks / report_to_misp
  Parse a report and import the events into MISP
  ☆29Updated 9 years ago
• fox-it / bro-scripts
  Bro-IDS scripts
  ☆50Updated 8 years ago