defenxor / dsiem
Security event correlation engine for ELK stack
☆435Updated 8 months ago
Alternatives and similar repositories for dsiem:
Users that are interested in dsiem are comparing it to the libraries listed below
- DFIRTrack - The Incident Response Tracking Application☆492Updated 6 months ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆247Updated last week
- Mapping the MITRE ATT&CK Matrix with Osquery☆790Updated last year
- Documentation of Cortex☆174Updated last year
- PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform☆630Updated last week
- Actionable analytics designed to combat threats☆982Updated 2 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆581Updated 8 months ago
- Zeek-Formatted Threat Intelligence Feeds☆356Updated this week
- Cortex Analyzers Repository☆450Updated this week
- Suricata, Snort and Zeek IDS rule and pcap testing system☆472Updated 2 months ago
- Documentation of TheHive☆396Updated last year
- Automated Use Case Testing☆167Updated 6 years ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆148Updated 2 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆186Updated 3 years ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆552Updated 3 years ago
- A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework☆351Updated 4 years ago
- MISP Docker (XME edition)☆283Updated last year
- Create actionable data from your Vulnerability Scans☆1,371Updated 2 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆449Updated 2 weeks ago
- A curated list of awesome things related to TheHive & Cortex☆177Updated 3 years ago
- A knowledge base of actionable Incident Response techniques☆633Updated 2 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated 2 weeks ago
- Extract and aggregate threat intelligence.☆851Updated last year
- A (nearly) production ready Dockered MISP☆231Updated last year
- ☆1,068Updated 5 years ago
- Detecting ATT&CK techniques & tactics for Linux☆258Updated 4 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆786Updated 4 years ago
- Threat Hunting tool about Sysmon and graphs☆330Updated last year
- A Python package to interact with the Mitre ATT&CK Framework☆474Updated last year
- An analytical framework for network traffic and behavioral analytics☆450Updated 2 years ago