Alternatives and similar repositories for ecs-suricata:

Users that are interested in ecs-suricata are comparing it to the libraries listed below

• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 3 years ago
• StamusNetworks / KTS6
  Kibana 6 Templates for Suricata IDPS Threat Hunting
  ☆24Updated 6 years ago
• HKcyberstark / wazuh-ecs
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆27Updated 4 years ago
• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 4 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆30Updated this week
• corelight / top-dns
  Top DNS Measurement for Bro
  ☆11Updated 4 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆35Updated last year
• B0fH / yara-suricata
  A Yara Lua output script for Suricata
  ☆19Updated 5 years ago
• airbus-cyber / graylog-plugin-logging-alert
  Alert notification plugin for Graylog to generate log messages from alerts
  ☆24Updated last week
• Alir3z4 / ansible-suricata
  An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.
  ☆15Updated 3 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 4 years ago
• danielguerra69 / bro-debian-elasticsearch
  bro on debian with elasticsearch support
  ☆24Updated 8 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated last month
• binorassocies / brostash
  brostash: Linux distribution based on Debian and focusing on network security events collection
  ☆34Updated 4 years ago
• theparanoids / rdfp
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆39Updated last year
• corelight / http-stalling-detector
  Detect HTTP stalling attacks like slowloris with Bro
  ☆19Updated 7 years ago
• bro / bro-osquery
  Bro integration with osquery
  ☆15Updated 2 years ago
• OTRF / openhunt
  ☆33Updated 3 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 4 years ago
• conix-security / bl2ru2
  Mass Suricata rules creator, from a list of domain
  ☆14Updated 6 years ago
• thomaspatzke / sigma-workshop
  Elasticsearch/Kibana environment and log data for Sigma workshop
  ☆26Updated 5 years ago
• Cyberg-ON / Timon-Rules
  Community-based CybergON-powered Suricata rules
  ☆12Updated 2 years ago
• Benster900 / BlogProjects
  Various blog post projects.
  ☆10Updated 9 months ago
• alertflex / altprobe
  collector/runner
  ☆65Updated last week
• j91321 / ansible-role-auditbeat
  Ansible role to install auditbeat for security monitoring. (Ruleset included)
  ☆15Updated last year
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆54Updated last year
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated 2 years ago
• adi928 / brocata
  Porting Suricata to Bro signatures
  ☆6Updated 5 years ago
• michalpurzynski / suricata-rules
  Example Suricata rules implementing some of my detection tactics
  ☆20Updated 2 years ago
• Patrowl / PatrowlCortexAnalyzers
  PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
  ☆11Updated 9 months ago