defenxor / dsiemLinks
Security event correlation engine for ELK stack
☆440Updated last year
Alternatives and similar repositories for dsiem
Users that are interested in dsiem are comparing it to the libraries listed below
Sorting:
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆248Updated 3 weeks ago
- DFIRTrack - The Incident Response Tracking Application☆522Updated 10 months ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆797Updated 2 years ago
- Documentation of Cortex☆174Updated last year
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆148Updated 3 years ago
- PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform☆635Updated 3 weeks ago
- MISP Docker (XME edition)☆282Updated last year
- Create actionable data from your Vulnerability Scans☆1,386Updated 2 years ago
- Cortex Analyzers Repository☆464Updated 2 weeks ago
- Wazuh - Ruleset☆454Updated 9 months ago
- Extract and aggregate threat intelligence.☆873Updated last year
- Documentation of TheHive☆398Updated last year
- Suricata, Snort and Zeek IDS rule and pcap testing system☆483Updated last month
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆188Updated 4 years ago
- Actionable analytics designed to combat threats☆990Updated 3 years ago
- SIEM Tactics, Techiques, and Procedures☆643Updated last week
- Elemental - An ATT&CK Threat Library☆318Updated 2 years ago
- Python API Client for TheHive☆230Updated this week
- DejaVU - Open Source Deception Framework☆411Updated 2 years ago
- Open Source SIEM (Security Information and Event Management system).☆213Updated last year
- A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…☆437Updated last year
- Zeek-Formatted Threat Intelligence Feeds☆374Updated this week
- A (nearly) production ready Dockered MISP☆232Updated last year
- An open-source, real-time Security Information & Event Management tool based on big data technologies, providing a scalable, advanced sec…☆207Updated 3 months ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆566Updated 6 months ago
- A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.☆873Updated 10 months ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆566Updated 3 years ago
- A set of Zeek scripts to detect ATT&CK techniques.☆596Updated last year
- A utility to safely generate malicious network traffic patterns and evaluate controls.☆1,315Updated last year
- Scirius is a web application for Suricata ruleset management and threat hunting.☆656Updated 3 weeks ago