Alternatives and similar repositories for audit-userspace

Users that are interested in audit-userspace are comparing it to the libraries listed below

• linux-audit / audit-documentation
  Documentation and specifications
  ☆196Updated 4 months ago
• linux-audit / audit-kernel
  GitHub mirror of the Linux Kernel's audit repository
  ☆153Updated last week
• linux-application-whitelisting / fapolicyd
  File Access Policy Daemon
  ☆214Updated last week
• SELinuxProject / refpolicy
  SELinux Reference Policy v2
  ☆331Updated 3 weeks ago
• Neo23x0 / auditd
  Best Practice Auditd Configuration
  ☆1,632Updated 4 months ago
• aide / aide
  aide source code
  ☆613Updated last month
• OpenSCAP / scap-workbench
  SCAP Scanner And Tailoring Graphical User Interface
  ☆232Updated last year
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆271Updated last month
• threathunters-io / laurel
  Transform Linux Audit logs for SIEM usage
  ☆767Updated 3 weeks ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆793Updated 4 years ago
• CISecurity / OVALRepo
  ☆276Updated last year
• OpenSCAP / openscap
  NIST Certified SCAP 1.2 toolkit
  ☆1,511Updated this week
• a2o / snoopy
  Snoopy Command Logger is a small library that logs all program executions on your Linux/BSD system.
  ☆1,255Updated 7 months ago
• containers / container-selinux
  SELinux policy files for Container Runtimes
  ☆269Updated this week
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆850Updated 2 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆651Updated 3 weeks ago
• Tripwire / tripwire-open-source
  Open Source Tripwire®
  ☆893Updated last year
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆434Updated 3 years ago
• linux-pam / linux-pam
  Linux PAM (Pluggable Authentication Modules for Linux) project
  ☆685Updated last month
• OwlCyberDefense / refpolicy
  refpolicy has moved to https://github.com/SELinuxProject/refpolicy
  ☆126Updated 6 years ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆209Updated 7 years ago
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆541Updated last month
• microsoft / SysinternalsEBPF
  The Linux port of the Sysinternals Sysmon tool.
  ☆262Updated 2 months ago
• microsoft / avml
  AVML - Acquire Volatile Memory for Linux
  ☆952Updated this week
• Scribery / tlog
  Terminal I/O logger
  ☆338Updated 4 months ago
• cloudflare / bpftools
  BPF Tools - packet analyst toolkit
  ☆1,212Updated 8 months ago
• SELinuxProject / setools
  SELinux Policy Analysis Tools
  ☆180Updated 3 weeks ago
• dev-sec / linux-baseline
  DevSec Linux Baseline - InSpec Profile
  ☆811Updated 9 months ago
• teoseller / osquery-attck
  Mapping the MITRE ATT&CK Matrix with Osquery
  ☆794Updated 2 years ago
• Magentron / chkrootkit
  This program locally checks for signs of a rootkit. 'Forked' to fix false-positive for SucKIT rootkit
  ☆236Updated 2 years ago