Alternatives and similar repositories for logstash-plugins:

Users that are interested in logstash-plugins are comparing it to the libraries listed below

• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 6 years ago
• fl0x2208 / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆14Updated 7 years ago
• eCrimeLabs / MISP2CbR
  Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.
  ☆19Updated 2 years ago
• csirtgadgets / csirtg-smrt-v1
  the fastest way to consume threat intelligence.
  ☆29Updated last year
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 5 years ago
• MISP / misp-workbench
  MISP Workbench
  ☆28Updated 8 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• kx499-zz / ostip
  ☆28Updated 7 years ago
• ncsa / bro-doctor
  ☆23Updated 4 years ago
• jordisk / TheHive2Sigma
  Python script to automatically create sigma rules from The hive observables
  ☆23Updated 5 years ago
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆52Updated 3 years ago
• S03D4-164 / Hiryu
  IOC Management and Visualization Tool
  ☆47Updated 2 years ago
• Concinnity-Risks / LogisticalBudget
  This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…
  ☆35Updated 5 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆62Updated 10 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 9 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆74Updated 11 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 8 years ago
• Intevation / intelmq-mailgen
  IntelMQ command line tool to process events and send out email notifications.
  ☆9Updated last week
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆48Updated 7 years ago
• kevthehermit / YaraManager
  Web based Manager for Yara Rules
  ☆57Updated 4 years ago
• PaloAltoNetworks / report_to_misp
  Parse a report and import the events into MISP
  ☆29Updated 9 years ago
• mohlcyber / MISP-STIX-ESM
  Exports MISP events to STIX and ingest into McAfee ESM
  ☆15Updated 5 years ago
• CERT-Bund / yara-exporter
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆24Updated 7 years ago
• gitunique / bro-scripts
  Collection of bro scripts
  ☆9Updated 9 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago