defenxor / dsiemLinks
Security event correlation engine for ELK stack
☆447Updated last year
Alternatives and similar repositories for dsiem
Users that are interested in dsiem are comparing it to the libraries listed below
Sorting:
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆248Updated 3 weeks ago
- MISP Docker (XME edition)☆283Updated 2 years ago
- DFIRTrack - The Incident Response Tracking Application☆531Updated last year
- Mapping the MITRE ATT&CK Matrix with Osquery☆805Updated 2 years ago
- PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform☆638Updated 3 weeks ago
- Documentation of Cortex☆174Updated 2 years ago
- Zeek-Formatted Threat Intelligence Feeds☆382Updated this week
- Create actionable data from your Vulnerability Scans☆1,394Updated 3 years ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆510Updated last month
- Cortex Analyzers Repository☆470Updated last week
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆478Updated this week
- Actionable analytics designed to combat threats☆1,005Updated 3 years ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆568Updated 3 weeks ago
- Scirius is a web application for Suricata ruleset management and threat hunting.☆671Updated 2 weeks ago
- Documentation of TheHive☆399Updated 2 years ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆149Updated 3 years ago
- DejaVU - Open Source Deception Framework☆424Updated 5 months ago
- Detecting ATT&CK techniques & tactics for Linux☆257Updated 5 years ago
- A Python package to interact with the Mitre ATT&CK Framework☆479Updated 2 years ago
- A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…☆464Updated last year
- A set of Zeek scripts to detect ATT&CK techniques.☆616Updated last year
- Extract and aggregate threat intelligence.☆894Updated last year
- A utility to safely generate malicious network traffic patterns and evaluate controls.☆1,346Updated last year
- A modular OSINT honeypot for blue teamers☆340Updated 2 years ago
- An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced sec…☆206Updated 9 months ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,174Updated 2 years ago
- Suricata rules for network anomaly detection☆180Updated last month
- Elemental - An ATT&CK Threat Library☆320Updated 3 years ago
- Suricata IDS/IPS log analytics using the Elastic Stack.☆241Updated 4 years ago
- A (nearly) production ready Dockered MISP☆230Updated last year