Alternatives and similar repositories for evebox

Users that are interested in evebox are comparing it to the libraries listed below

• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆656Updated 3 weeks ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆276Updated last week
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆239Updated 3 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆483Updated last month
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆210Updated 7 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆282Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆243Updated last year
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆286Updated this week
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆170Updated 2 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆454Updated 9 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆436Updated 4 years ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆455Updated 2 years ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆117Updated 7 years ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆201Updated 3 years ago
• defenxor / dsiem
  Security event correlation engine for ELK stack
  ☆440Updated last year
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,547Updated 11 months ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆797Updated 5 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆352Updated last year
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆403Updated 2 years ago
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆542Updated 2 months ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆101Updated 2 years ago
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆181Updated 9 months ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆439Updated last year
• mushorg / snare
  Super Next generation Advanced Reactive honEypot
  ☆465Updated last year
• jmpsec / osctrl
  Fast and efficient osquery management
  ☆454Updated last month
• austin-taylor / flare
  An analytical framework for network traffic and behavioral analytics
  ☆452Updated 2 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆183Updated 2 years ago
• AlienVault-OTX / OTX-Suricata
  The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…
  ☆111Updated last year
• SeisoLLC / zeek-kafka
  A Zeek log writer plugin that publishes to Kafka.
  ☆48Updated 6 months ago