Alternatives and similar repositories for audit-userspace

Users that are interested in audit-userspace are comparing it to the libraries listed below

• linux-audit / audit-documentation
  Documentation and specifications
  ☆201Updated 11 months ago
• linux-audit / audit-kernel
  GitHub mirror of the Linux Kernel's audit repository
  ☆156Updated last week
• linux-application-whitelisting / fapolicyd
  File Access Policy Daemon
  ☆231Updated last week
• aide / aide
  aide source code
  ☆669Updated 3 weeks ago
• SELinuxProject / refpolicy
  SELinux Reference Policy v2
  ☆362Updated last week
• OpenSCAP / scap-workbench
  SCAP Scanner And Tailoring Graphical User Interface
  ☆233Updated last year
• Neo23x0 / auditd
  Best Practice Auditd Configuration
  ☆1,739Updated last month
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆288Updated 2 months ago
• OpenSCAP / openscap
  NIST Certified SCAP 1.2 toolkit
  ☆1,642Updated last week
• Tripwire / tripwire-open-source
  Open Source Tripwire®
  ☆921Updated last year
• CISecurity / OVALRepo
  ☆280Updated 2 years ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆823Updated 5 years ago
• threathunters-io / laurel
  Transform Linux Audit logs for SIEM usage
  ☆809Updated last month
• OwlCyberDefense / refpolicy
  refpolicy has moved to https://github.com/SELinuxProject/refpolicy
  ☆127Updated 7 years ago
• netsniff-ng / netsniff-ng
  A Swiss army knife for your daily Linux network plumbing.
  ☆1,378Updated 7 months ago
• shirkdog / pulledpork
  Pulled Pork for Snort and Suricata rule management (from Google code)
  ☆442Updated 4 years ago
• microsoft / SysinternalsEBPF
  The Linux port of the Sysinternals Sysmon tool.
  ☆281Updated 3 months ago
• libguestfs / libguestfs
  library and tools for accessing and modifying virtual machine disk images. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See th…
  ☆700Updated 2 weeks ago
• jmpsec / osctrl
  Fast and efficient osquery management
  ☆485Updated 2 weeks ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆499Updated last year
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆480Updated last week
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆672Updated 3 weeks ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆512Updated last week
• SELinuxProject / selinux-notebook
  The SELinux Notebook
  ☆703Updated last week
• linux-pam / linux-pam
  Linux PAM (Pluggable Authentication Modules for Linux) project
  ☆746Updated last week
• palantir / osquery-configuration
  A repository for using osquery for incident detection and response
  ☆877Updated 4 months ago
• mechpen / sockdump
  Dump unix domain socket traffic with bpf
  ☆416Updated 2 years ago
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆310Updated last month
• cloudflare / bpftools
  BPF Tools - packet analyst toolkit
  ☆1,224Updated last year
• containers / udica
  This repository contains a tool for generating SELinux security profiles for containers
  ☆566Updated last month