Alternatives and similar repositories for ossec-hids

Users that are interested in ossec-hids are comparing it to the libraries listed below

• anthonykasza / snapshooter
  It's like a polaroid, but for domains
  ☆24Updated 10 years ago
• cudeso / host-enrich
  Enrich a host with open source security information
  ☆27Updated 9 years ago
• torque59 / nosqlpot
  The NoSQL Honeypot Framework
  ☆102Updated last year
• honeynet / yapdns
  YAPDNS
  ☆39Updated 10 years ago
• jgamblin / badactors
  Create a list of bad actors from public IP blacklist.
  ☆75Updated 7 years ago
• CIRCL / cve-portal
  Common Vulnerabilities and Exposures - Portal. Archived and now replaced by vulnerability-lookup.org
  ☆86Updated 5 months ago
• StamusNetworks / ansible-misp
  Ansible playbook to install Malware Information Sharing Platform (MISP)
  ☆17Updated 10 years ago
• averagesecurityguy / twanalyze
  Extract useful information from a Twitter account.
  ☆34Updated 11 years ago
• EmergingThreats / cuckoo-1.1
  cuckoo-1.1 fork with suricata/moloch/clamav and other goodies
  ☆23Updated 10 years ago
• jeffbryner / pyioc
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Updated 3 years ago
• dnlongen / Snort-DNS
  Snort rules to detect local malware, phishing, and adult content by inspecting DNS responses from OpenDNS
  ☆52Updated 8 years ago
• SubtleScope / logfile-generators
  Series of scripts to generate fake logs for use in cyber exercises.
  ☆17Updated 9 years ago
• videlanicolas / assimilator
  Automatic firewall rule orchestator.
  ☆83Updated 7 years ago
• fox-it / bro-scripts
  Bro-IDS scripts
  ☆50Updated 8 years ago
• marklit / whois
  Collects WHOIS details for every IPv4 netblock. Reports supported via Elasticsearch.
  ☆103Updated 6 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 7 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆48Updated 11 years ago
• hadojae / redonion
  **BETA** A simple buildscript for network security monitoring on RHEL/CentOS
  ☆31Updated 8 years ago
• rmkml / etplc
  ☆17Updated 7 years ago
• bez0r / pDNS2
  Passive DNS V2
  ☆60Updated 11 years ago
• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• eSentire / cymon-python
  Python library for Cymon.io APIs
  ☆32Updated 8 years ago
• CIRCL / bgpranking-redis-api
  API to access the Redis database of a BGP Ranking instance.
  ☆17Updated 7 years ago
• dnsdb / dnsdb-query
  DNSDB query scripts
  ☆75Updated 5 years ago
• passivetotal / HT_infra
  VPS infrastructure found in HT dumps
  ☆26Updated 10 years ago
• thugs-rumal / rumal
  Thug's Rumāl: a Thug's dress & weapon
  ☆37Updated 8 years ago
• jonschipp / mal-dnssearch
  Compare multiple log formats against malware reputation lists.
  ☆88Updated 8 years ago
• fygrave / honeyntp
  NTP logger/honeypot
  ☆54Updated 11 years ago
• ikoniaris / kippo2elasticsearch
  Transfer Kippo data to ElasticSearch
  ☆18Updated 9 years ago
• wolfpack1 / intel_collection_tools
  ☆22Updated 7 years ago