Alternatives and similar repositories for spl-parser:

Users that are interested in spl-parser are comparing it to the libraries listed below

• OTRF / OSSEM-CDM
  OSSEM Common Data Model
  ☆55Updated 2 years ago
• salspaugh / splparser
  Simple parser for Splunk Processing Language (SPL) written in Python.
  ☆35Updated 6 years ago
• opencybersecurityalliance / firepit
  Firepit - STIX Columnar Storage
  ☆16Updated 10 months ago
• corelight / got_zoom
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Updated 5 years ago
• target / strelka-ui
  Strelka Web UI for File Submission and Analysis
  ☆68Updated this week
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 5 years ago
• marirs / sigma-convert
  Convert Sigma Rules to different formats
  ☆11Updated 8 months ago
• Cluster25 / detection
  Threat Detection Rules (Snort/Sigma/Yara)
  ☆13Updated last year
• corelight / zeek2es
  A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…
  ☆35Updated 2 years ago
• OTRF / openhunt
  ☆33Updated 3 years ago
• CyCat-project / cycat-taxonomy
  CyCAT.org taxonomies
  ☆14Updated 3 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆35Updated last year
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆51Updated 3 months ago
• opencybersecurityalliance / kestrel-jupyter
  Kestrel Jupyter Notebook Kernel
  ☆9Updated last year
• Loginsoft-LLC / threat-detection-rules
  Threat Detection & Anomaly Detection rules for popular open-source components
  ☆51Updated 2 years ago
• grapl-security / grapl-analyzers
  Hosted analyzers built for Grapl
  ☆13Updated 2 years ago
• chronicle / api-samples-python
  Python samples and utilities for Chronicle APIs
  ☆81Updated last month
• splunk / vscode-extension-splunk
  Visual Studio Code Extension for Splunk
  ☆90Updated 3 weeks ago
• murchisd / splunk_pstree_app
  Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)
  ☆23Updated 2 years ago
• Kirtar22 / ATTACK-Threat_Intel
  Graph Representation of MITRE ATT&CK's CTI data
  ☆48Updated 5 years ago
• splunk / security_content_docs
  Contains research.splunk.com site code
  ☆11Updated last year
• Prelude-SIEM / prelude-correlator
  The official Prelude-Correlator GitHub mirror of https://www.prelude-siem.org/projects/prelude-correlator/repository
  ☆10Updated 4 years ago
• Security-Onion-Solutions / securityonion-docker-hh
  ☆20Updated 4 years ago
• STIX-Modeler / UI
  STIX 2.1 Data Modeling Tool
  ☆27Updated 9 months ago
• atc-project / react-navigator
  Web app that provides basic navigation and annotation of ATT&CK matrices
  ☆16Updated 4 years ago
• SigmaHQ / cookiecutter-pySigma-backend
  pySigma Cookiecutter backend template
  ☆24Updated last month
• mitre / caret
  CARET - A tool for viewing cyber analytic relationships
  ☆54Updated 5 years ago
• Truvis / SplunkDashboards
  Collection of Dashboards for Threat Hunting and more!
  ☆67Updated 4 years ago
• Exporttool / exporttool
  This is a python script that can be run on each Splunk Indexer for the purpose of exporting historical bucket data (raw events + metadata…
  ☆11Updated last year
• Cyb3rWard0g / infosec-well-done
  A few quick recipes for those that do not have much time during the day
  ☆22Updated 6 months ago