kpolley / RELK
RELK -- The Research Elastic Stack (Kafka, Beats, Zookeeper, Logstash, ElasticSearch, Kibana, Spark, & Jupyter -- All in Docker)
☆26Updated 5 years ago
Alternatives and similar repositories for RELK:
Users that are interested in RELK are comparing it to the libraries listed below
- ☆23Updated 4 years ago
- alertflex controller☆10Updated last year
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- Zeek support for Community ID flow hashing.☆35Updated last year
- Scripts to inject demo data and network traffic into an existing Alienvault/OSSIM installation☆21Updated 7 years ago
- Utility for parsing Bro log files into CSV or JSON format☆41Updated 2 years ago
- ☆20Updated 4 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- Integrate Zeek with Alienvault OTX☆25Updated 4 years ago
- brostash: Linux distribution based on Debian and focusing on network security events collection☆34Updated 4 years ago
- ☆33Updated 3 years ago
- My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by …☆10Updated 5 years ago
- Very basic CLI SIEM (Security Information and Event Management system).☆36Updated 6 years ago
- ☆28Updated 7 years ago
- JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox☆44Updated 5 years ago
- Apache Metron Workshop Lab materials and instructions.☆35Updated 5 years ago
- Bro Intel Feed Linter☆26Updated 5 years ago
- Potiron - Normalize, Index and Visualize Network Capture☆84Updated 5 years ago
- Threat Intelligence distribution☆30Updated 9 years ago
- Threat Intelligence with Elastic - Minemeld integration with Elasticsearch☆19Updated 3 years ago
- A Zeek package that detects Zoom logins and meeting joins☆12Updated 4 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; inclu…☆39Updated 5 years ago
- ☆13Updated 2 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Updated 5 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Imports Alienvault OTX pulses to a MISP instance☆52Updated 3 years ago
- ☆24Updated 8 years ago
- Python tool build around GreyNoise's alpha/public API☆10Updated 6 years ago
- This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…☆35Updated 5 years ago