Alternatives and similar repositories for evebox:

Users that are interested in evebox are comparing it to the libraries listed below

• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆639Updated last month
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆237Updated 3 years ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆263Updated last month
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆465Updated 3 weeks ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆205Updated 6 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆448Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆233Updated 8 months ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆115Updated 6 years ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 3 years ago
• defenxor / dsiem
  Security event correlation engine for ELK stack
  ☆433Updated 7 months ago
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆269Updated last month
• AlienVault-OTX / OTX-Suricata
  The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…
  ☆108Updated 9 months ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆196Updated 2 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆167Updated last year
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆432Updated 4 months ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆100Updated 2 years ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆104Updated this week
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,503Updated 5 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆424Updated 3 years ago
• quadrantsec / sagan
  Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…
  ☆161Updated 2 months ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆778Updated 4 years ago
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆155Updated last week
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆350Updated 9 months ago
• jpalanco / alienvault-ossim
  Alienvault ossim
  ☆120Updated 5 years ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆373Updated last week
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆175Updated 3 years ago
• shendo / websnort
  Web service for scanning pcaps with snort
  ☆108Updated 6 years ago
• robcowart / synesis_lite_snort
  Snort IDS/IPS log analytics using the Elastic Stack.
  ☆85Updated 3 years ago