Alternatives and similar repositories for osctrl

Users that are interested in osctrl are comparing it to the libraries listed below

• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆880Updated 5 months ago
• kolide / launcher
  Osquery launcher, autoupdater, and packager
  ☆536Updated this week
• zercurity / zercurity
  Manage, monitor and improve your cyber security posture.
  ☆93Updated 2 years ago
• defenxor / dsiem
  Security event correlation engine for ELK stack
  ☆447Updated last year
• threathunters-io / laurel
  Transform Linux Audit logs for SIEM usage
  ☆811Updated last month
• chainguard-dev / osquery-defense-kit
  Production-ready detection & response queries for osquery
  ☆599Updated 5 months ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆481Updated 2 weeks ago
• SecurityBrewery / catalyst
  ⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident…
  ☆507Updated last week
• teoseller / osquery-attck
  Mapping the MITRE ATT&CK Matrix with Osquery
  ☆808Updated 2 years ago
• Patrowl / PatrowlManager
  PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
  ☆637Updated 3 weeks ago
• trailofbits / osquery-extensions
  osquery extensions by Trail of Bits
  ☆269Updated 2 years ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆90Updated last week
• Patrowl / PatrowlEngines
  PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
  ☆247Updated 3 weeks ago
• sttor / awesome-osquery
  Osquery Resources
  ☆63Updated 6 years ago
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆973Updated 3 weeks ago
• quadrantsec / sagan
  Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…
  ☆191Updated 4 months ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆452Updated last week
• z1pti3 / jimi
  Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …
  ☆169Updated last year
• mwielgoszewski / doorman
  an osquery fleet manager
  ☆620Updated 3 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆502Updated last year
• FoxIO-LLC / LogSlash
  A standard for reducing log volume without sacrificing analytical capability
  ☆214Updated 11 months ago
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆269Updated 2 years ago
• tenzir / tenzir
  Tenzir is the data pipeline engine for security teams.
  ☆719Updated this week
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆289Updated 3 months ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆675Updated last month
• kolide / fleet
  A flexible control server for osquery fleets
  ☆1,100Updated 5 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated 2 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆108Updated last year
• wazuh / wazuh-dashboard-plugins
  Plugins for Wazuh Dashboard
  ☆495Updated this week
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆824Updated 5 years ago