Alternatives and similar repositories for python-humio

Users that are interested in python-humio are comparing it to the libraries listed below

• target / huntlib
  A Python library to help with some common threat hunting data analysis operations
  ☆143Updated 2 years ago
• philhagen / timeshift
  A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.
  ☆21Updated 3 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆145Updated 11 months ago
• chronicle / api-samples-python
  Python samples and utilities for Chronicle APIs
  ☆84Updated last month
• kolide / docker-osquery
  Dockerfiles for containerized osquery
  ☆13Updated 8 years ago
• jconwell / fqdn_parser
  fqdn_parser (Fully Qualified Domain Name Parser) is a library for parsing FQDNs into their component parts, as well as providing addition…
  ☆27Updated last year
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated 3 weeks ago
• OktaSecurityLabs / sgt
  Osquery Mangement Server
  ☆115Updated 5 years ago
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated 2 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated last month
• CrowdStrike / caracara
  Developer enhancements (DX) for FalconPy, the CrowdStrike Python SDK
  ☆39Updated this week
• carbonblack / cb-event-forwarder
  Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.
  ☆73Updated last year
• demisto / demisto-py
  Demisto Client for Python
  ☆72Updated this week
• CrowdStrike / falcon-integration-gateway
  Falcon Integration Gateway (FIG)
  ☆20Updated this week
• splunk / salo
  Synthetic Adversarial Log Objects: A Framework for synthentic log generation
  ☆83Updated last year
• CrowdStrike / Falcon-Toolkit
  Unleash the power of the Falcon Platform at the CLI
  ☆122Updated last month
• corelight / Corelight-Ansible-Roles
  Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…
  ☆16Updated 4 years ago
• splunk / attack_range_cloud
  Attack Range to test detection against nativel serverless cloud services and environments
  ☆35Updated 3 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• oasis-open / cti-stix-elevator
  OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON
  ☆50Updated last year
• opendxl / opendxl-environment
  Pre-configured environment that supports the development and running of OpenDXL solutions
  ☆13Updated 4 years ago
• corelight / cve-2021-44228
  Log4j Exploit Detection Logic for Zeek
  ☆19Updated last year
• spotify / terraform-google-grr
  A Terraform module for GRR: the distributed incident forensics and response framework
  ☆52Updated 5 years ago
• mikermcneil / fleet-osquery-in-a-box
  Simple Docker-based quickstart for osquery, Fleet, and ELK stack
  ☆63Updated last year
• activecm / docker-zeek
  Run zeek with zeekctl in docker
  ☆54Updated 10 months ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆141Updated 2 years ago
• oasis-open / cti-pattern-validator
  OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators
  ☆28Updated last year
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 4 years ago
• sensoroni / sensoroni
  Web-based sensor management suite
  ☆20Updated 2 years ago
• threat-punter / detection-as-code-example
  A POC to implement Detection-as-Code with Terraform and Sumo Logic.
  ☆29Updated 2 years ago