Alternatives and similar repositories for logstash-plugins:

Users that are interested in logstash-plugins are comparing it to the libraries listed below

• csirtgadgets / csirtg-smrt-v1
  the fastest way to consume threat intelligence.
  ☆29Updated 2 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆51Updated 2 months ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆35Updated last year
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 6 years ago
• Intevation / intelmq-mailgen
  IntelMQ command line tool to process events and send out email notifications.
  ☆9Updated 2 weeks ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆52Updated 3 years ago
• ncsa / bro-doctor
  ☆23Updated 5 years ago
• eCrimeLabs / MISP2CbR
  Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.
  ☆19Updated 2 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• jordisk / TheHive2Sigma
  Python script to automatically create sigma rules from The hive observables
  ☆24Updated 6 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆74Updated 12 years ago
• Patrowl / PatrowlCortexAnalyzers
  PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform
  ☆11Updated 9 months ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 3 years ago
• S03D4-164 / Hiryu
  IOC Management and Visualization Tool
  ☆47Updated 2 years ago
• LiamRandall / BroMalware-Exercise
  ☆85Updated 11 years ago
• sfakiana / FIRST-CTI-2019
  References for FIRST CTI 2019 Symposium presentation
  ☆22Updated 6 years ago
• MISP / misp-workbench
  MISP Workbench
  ☆28Updated 8 years ago
• DCSO / MISP-dockerized
  ☆33Updated 4 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆48Updated 7 years ago
• CERT-Bund / yara-exporter
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆24Updated 8 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 9 years ago
• fl0x2208 / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆14Updated 7 years ago
• initconf / scan-NG
  scan-detection policies for bro
  ☆16Updated 2 months ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 11 years ago
• kx499-zz / ostip
  ☆28Updated 8 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• ncsa / bro-interface-setup
  ☆9Updated 5 years ago