My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by filter sig, feed FIR (CERT SG)
☆10Jul 26, 2019Updated 7 years ago
Alternatives and similar repositories for logstash-plugins
Users that are interested in logstash-plugins are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- certstream + analytics☆11Jan 17, 2020Updated 6 years ago
- Real-time Packet Observation Tool☆39Sep 26, 2023Updated 3 years ago
- Python script to automatically create sigma rules from The hive observables☆25Mar 17, 2019Updated 7 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆19Jun 15, 2021Updated 5 years ago
- Hakabana monitoring tool using Haka, ElastcSearch and Kibana☆20Sep 24, 2014Updated 12 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A collection of utilities to help with analysis on the command line.☆18Aug 9, 2024Updated 2 years ago
- Some C code I wrote while learning the Lua C API☆11May 16, 2024Updated 2 years ago
- A repo of Java examples using Apache Flink with flink-connector-kafka☆10Mar 10, 2026Updated 7 months ago
- MISP Workbench☆27Oct 19, 2016Updated 10 years ago
- A dataset of phishing kits in the wild☆15Jun 1, 2024Updated 2 years ago
- nfsinkhole is a Python library and scripts for setting up a Linux server as a sinkhole (monitor, log/capture, and drop all traffic to a s…☆12Apr 8, 2017Updated 9 years ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- LogStash Grok patterns☆14Aug 3, 2016Updated 10 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆17Jan 6, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- automatic enumeration and maintenance of Suricata monitoring interfaces☆12Dec 10, 2019Updated 6 years ago
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆51Sep 6, 2023Updated 3 years ago
- empow's intent classification plugin☆11Jun 27, 2019Updated 7 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Docker environment for Code Search on Fess.☆11Updated this week
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- A lightweight MusicBrainz CLI in Go.☆12Mar 22, 2019Updated 7 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆10Sep 10, 2026Updated last month
- Slack integration for Claude Code using MCP (Model Context Protocol). Enable your team to use Claude Code collaboratively through Slack.☆11Jun 30, 2025Updated last year
- This is a simple CEP Engine leveraging the Kafka Streams platform☆16Apr 25, 2017Updated 9 years ago
- IOC matching for incident responders, threat hunters, detection engineers, and security engineers.☆19May 28, 2024Updated 2 years ago
- A powerful streaming log template miner based on the Drain algorithm in golang☆16Oct 23, 2024Updated 2 years ago
- Gather and compile open source threat intelligence feeds.☆39Feb 19, 2022Updated 4 years ago
- Declare and keep up a rogue default-gateway in Cisco's HSRP default configuration☆16May 26, 2017Updated 9 years ago
- Hogzilla is an Intrusion Detection System (IDS) supported by Snort, Apache Spark, HBase and libnDPI, which provides Network Anomaly Detec…☆28Apr 18, 2018Updated 8 years ago
- Zeek package to create JSON formatted logs to stream into data analysis systems.☆31Dec 3, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This Script will walk you through creating elastalert rules☆11Dec 18, 2018Updated 7 years ago
- Meer is a "spooler" for Suricata / Sagan.☆30Jun 21, 2023Updated 3 years ago
- ☆12Feb 2, 2022Updated 4 years ago
- Feed for verious malicious IPs such as malware and botnets☆13Jun 20, 2016Updated 10 years ago
- ☆15Updated this week
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- Find the best orientation for 3D printing (FFF/FDM) STL files using constrained global nonlinear optimization (DIRECT algorithm)☆12Jul 6, 2023Updated 3 years ago