dsvetlov / lightsiem
Lightweight and sexy Security Information and Event Managment system for OSSEC, Snort and other IDS/IPS
☆109Updated 4 years ago
Alternatives and similar repositories for lightsiem
Users that are interested in lightsiem are comparing it to the libraries listed below
Sorting:
- A Simple QUEry and Report Tool☆142Updated 5 years ago
- Vulnerability scanner based on vulners.com audit API☆201Updated 6 years ago
- Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS☆183Updated 2 years ago
- Monitoring attacks with elastick, kibana, grok, logstash and beats☆20Updated 8 years ago
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆228Updated 4 years ago
- ☆141Updated 11 months ago
- Threat Analysis, Reconnaissance, and Data Intelligence System☆125Updated 9 years ago
- Потом объясню, что это такое☆15Updated 6 years ago
- Compare multiple log formats against malware reputation lists.☆88Updated 7 years ago
- Zabbix vulnerability assessment plugin☆217Updated last month
- Web service for scanning pcaps with snort☆109Updated 6 years ago
- Vulnerability Data in ES☆146Updated 7 years ago
- Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...☆72Updated 6 years ago
- ☆132Updated 6 years ago
- Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration☆262Updated 7 years ago
- Automatic firewall rule orchestator.☆83Updated 7 years ago
- Templates for Kibana/Logstash to use with Suricata IDPS☆80Updated 9 years ago
- Live events map as a Kibana plugin☆74Updated 7 years ago
- Kibana 4 Templates for Suricata IDPS☆33Updated 8 years ago
- Honeypot Intelligence with Splunk☆254Updated 6 years ago
- ☆162Updated 5 years ago
- Dockerfiles for NSM tools☆84Updated 8 years ago
- Alienvault ossim☆122Updated 3 months ago
- A Distributed, Search-Optimized Full Packet Capture System☆242Updated 2 years ago
- GeoLogonalyzer is a utility to analyze remote access logs for anomalies such as travel feasibility and data center sources.☆195Updated 9 months ago
- Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases☆153Updated last year
- Docker container for MISP☆96Updated 6 years ago
- Rule sets for Sagan☆104Updated 4 years ago
- Suricata Extreme Performance Tuning guide☆208Updated 7 years ago
- A web interface for interacting with your Bro IDS logs.☆85Updated 3 years ago