Alternatives and similar repositories for OSSIEM

Users that are interested in OSSIEM are comparing it to the libraries listed below

• socfortress / CoPilot
  SOCFortress CoPilot
  ☆397Updated last week
• socfortress / OSSIEM
  Open Source SIEM Stack
  ☆133Updated last month
• MISP / misp-docker
  A production ready Dockered MISP
  ☆290Updated last week
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆1,135Updated 3 weeks ago
• tguard-soc-package / nusantara
  ☆218Updated last year
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆202Updated 4 months ago
• WithSecureLabs / Kanvas
  A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
  ☆406Updated last month
• LoicVeirman / HardenAD
  Hardening Active Directory version 2
  ☆354Updated 3 weeks ago
• Bert-JanP / Incident-Response-Powershell
  PowerShell Digital Forensics & Incident Response Scripts.
  ☆716Updated last month
• LoicVeirman / Hello-My-Dir
  This project is specifically made for brand new directory and ease their creation with all security rules in place.
  ☆118Updated 4 months ago
• Harden365 / Harden365
  Protect your data in minutes !
  ☆122Updated last year
• alextibor / wazuh-fortigate-rules-decoders
  Decoders and Rules for Fortigate in Wazuh
  ☆53Updated last year
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆31Updated last year
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆88Updated last week
• juaromu / wazuh-opencti
  ☆39Updated 2 years ago
• dbarzin / deming
  Management tool for the information security management system / Outil de gestion du système de management de la sécurité de l'informatio…
  ☆305Updated 2 weeks ago
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆295Updated last week
• socfortress / Playbooks
  Playbooks for SOC Analysts
  ☆626Updated 2 years ago
• cert-advens / IRM
  ☆162Updated 2 weeks ago
• securityjoes / MasterParser
  MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
  ☆744Updated 3 months ago
• gbrigandi / mcp-server-wazuh
  MCP Server for Wazuh SIEM
  ☆140Updated 4 months ago
• invictus-ir / Microsoft-Extractor-Suite
  A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
  ☆731Updated 3 weeks ago
• cisagov / LME
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…
  ☆1,148Updated this week
• ls111-cybersec / thehive-cortex-misp-docker-compose-lab11update
  ☆31Updated 2 years ago
• Bert-JanP / Open-Source-Threat-Intel-Feeds
  This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…
  ☆722Updated 9 months ago
• utmstack / UTMStack
  Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
  ☆359Updated last week
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆140Updated 8 months ago
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆134Updated 4 years ago
• AhmadMavali / wazuh_multi_tenant
  setup wazuh to serve multiple organizations on a single instance.
  ☆11Updated last year
• Myohannn / CIS-Auditor-Windows
  A Windows CIS benchmark policy compliance auditor
  ☆57Updated last year