Alternatives and similar repositories for OSSIEM

Users that are interested in OSSIEM are comparing it to the libraries listed below

• socfortress / CoPilot
  SOCFortress CoPilot
  ☆313Updated this week
• socfortress / OSSIEM
  Open Source SIEM Stack
  ☆105Updated last week
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆828Updated this week
• MISP / misp-docker
  A production ready Dockered MISP
  ☆263Updated this week
• tguard-soc-package / nusantara
  ☆215Updated last year
• alextibor / wazuh-fortigate-rules-decoders
  Decoders and Rules for Fortigate in Wazuh
  ☆42Updated last year
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆191Updated last month
• LoicVeirman / Hello-My-Dir
  This project is specifically made for brand new directory and ease their creation with all security rules in place.
  ☆110Updated last month
• LoicVeirman / HardenAD
  Hardening Active Directory version 2
  ☆333Updated 4 months ago
• dbarzin / deming
  Management tool for the information security management system / Outil de gestion du système de management de la sécurité de l'informatio…
  ☆295Updated this week
• utmstack / UTMStack
  Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
  ☆315Updated this week
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆84Updated last month
• Harden365 / Harden365
  Protect your data in minutes !
  ☆121Updated 9 months ago
• socfortress / Playbooks
  Playbooks for SOC Analysts
  ☆569Updated 2 years ago
• CyberFlooD / WAZUH-Sentinel-AD
  WAZUH Sentinel AD - Ultimate rules for Wazuh
  ☆33Updated last month
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆29Updated 10 months ago
• Bert-JanP / Incident-Response-Powershell
  PowerShell Digital Forensics & Incident Response Scripts.
  ☆638Updated last month
• WithSecureLabs / Kanvas
  A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
  ☆348Updated last month
• Bert-JanP / Open-Source-Threat-Intel-Feeds
  This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…
  ☆696Updated 6 months ago
• juaromu / wazuh-opencti
  ☆37Updated last year
• NGEPRO1 / publications
  ☆12Updated 6 months ago
• cert-advens / IRM
  ☆160Updated 10 months ago
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆255Updated 2 weeks ago
• socfortress / iris-velociraptorartifact-module
  IRIS Module to Run Any Velociraptor Artifact
  ☆13Updated 2 years ago
• cisagov / LME
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…
  ☆1,090Updated this week
• AhmadMavali / wazuh_multi_tenant
  setup wazuh to serve multiple organizations on a single instance.
  ☆10Updated last year
• securityjoes / MasterParser
  MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
  ☆737Updated 4 months ago
• Yamato-Security / EnableWindowsLogSettings
  Documentation and scripts to properly enable Windows event logs.
  ☆624Updated last year
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆131Updated 5 months ago
• cyb3rmik3 / MDE-DFIR-Resources
  A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …
  ☆396Updated 7 months ago