fkie-cad / LogprepLinks
log data pre processing, generation and shipping in python
☆35Updated this week
Alternatives and similar repositories for Logprep
Users that are interested in Logprep are comparing it to the libraries listed below
Sorting:
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 3 months ago
- Zeek support for Community ID flow hashing.☆37Updated 2 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆91Updated last week
- ☆33Updated this week
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 3 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Updated 5 years ago
- Converts Netwitness log parser configuration to Logstash configuration☆20Updated 5 years ago
- The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing conf…☆32Updated 4 years ago
- ☆18Updated last year
- Zeek package for tracking long connections to report them before they have completed.☆31Updated 2 months ago
- server for indexing and querying passive DNS observations☆49Updated last month
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆56Updated this week
- A Python implementation of the Community ID flow hashing standard☆24Updated 2 years ago
- The Security Analyst’s Guide to Suricata☆61Updated 9 months ago
- ☆53Updated last week
- Log4j Exploit Detection Logic for Zeek☆19Updated 2 months ago
- RPM packages for MISP☆39Updated 3 weeks ago
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆32Updated last year
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆122Updated 4 years ago
- Suricata JSON schema project☆12Updated 6 years ago
- Integrate Zeek with Alienvault OTX☆25Updated 5 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆269Updated 2 years ago
- Definition, description and relationship types of MISP objects☆105Updated this week
- Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:☆123Updated this week
- OASIS TC Open Repository: Match STIX content against STIX patterns☆46Updated 3 years ago
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Updated 3 years ago
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated last year
- Plugin providing native AF_Packet support for Zeek.☆33Updated 3 months ago
- ☆15Updated 2 years ago
- S4A main repository. SaltStack states, install script and build scripts☆27Updated 3 weeks ago