Alternatives and similar repositories for OSSIEM

Users that are interested in OSSIEM are comparing it to the libraries listed below

• socfortress / CoPilot
  SOCFortress CoPilot
  ☆417Updated this week
• socfortress / OSSIEM
  Open Source SIEM Stack
  ☆136Updated last week
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆1,169Updated last week
• WithSecureLabs / Kanvas
  A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
  ☆412Updated 2 months ago
• alextibor / wazuh-fortigate-rules-decoders
  Decoders and Rules for Fortigate in Wazuh
  ☆56Updated last year
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆31Updated last year
• MISP / misp-docker
  A production ready Dockered MISP
  ☆298Updated this week
• Bert-JanP / Incident-Response-Powershell
  PowerShell Digital Forensics & Incident Response Scripts.
  ☆719Updated 2 months ago
• LoicVeirman / Hello-My-Dir
  This project is specifically made for brand new directory and ease their creation with all security rules in place.
  ☆123Updated 3 weeks ago
• Harden365 / Harden365
  Protect your data in minutes !
  ☆125Updated last year
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆202Updated 5 months ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆88Updated this week
• LoicVeirman / HardenAD
  Hardening Active Directory version 2
  ☆362Updated this week
• juaromu / wazuh-opencti
  ☆40Updated 2 years ago
• tguard-soc-package / nusantara
  ☆218Updated last year
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆304Updated last week
• Myohannn / CIS-Auditor-Windows
  A Windows CIS benchmark policy compliance auditor
  ☆59Updated last year
• invictus-ir / Microsoft-Extractor-Suite
  A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
  ☆743Updated last month
• cyb3rmik3 / KQL-threat-hunting-queries
  A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…
  ☆750Updated 3 months ago
• utmstack / UTMStack
  Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
  ☆485Updated this week
• LETHAL-FORENSICS / Microsoft-Analyzer-Suite
  A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
  ☆564Updated last week
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆134Updated 4 years ago
• gbrigandi / mcp-server-wazuh
  MCP Server for Wazuh SIEM
  ☆148Updated this week
• msdirtbag / MDEAutomator
  PowerShell-based Automation of Defender for Endpoint
  ☆181Updated 5 months ago
• yuriskinfo / Fortinet-tools
  Tools to help you with daily tasks of configuring/debugging/monitoring Fortinet products - Fortigate, FortiAnalyzer, Fortimanager. I do n…
  ☆123Updated 2 weeks ago
• cisagov / LME
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…
  ☆1,274Updated this week
• socfortress / Playbooks
  Playbooks for SOC Analysts
  ☆635Updated 3 years ago
• SlimKQL / Hunting-Queries-Detection-Rules
  KQL Queries. Microsoft Defender, Microsoft Sentinel
  ☆790Updated 2 weeks ago
• EvotecIT / PasswordSolution
  This module allows the creation of password expiry emails for users, managers, administrators, and security according to defined template…
  ☆156Updated 7 months ago
• rod-trent / Sentinel-SOC-101
  Content and collateral for the Microsoft Sentinel SOC 101 series
  ☆202Updated last year