Alternatives and similar repositories for CEFly

Users that are interested in CEFly are comparing it to the libraries listed below

• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆57Updated 10 years ago
• et0x / Incident-Response
  ☆36Updated 9 years ago
• BechtelCIRT / beholder
  Beholder is a shell script which installs and configures essentials to peer into your network activity.
  ☆19Updated 8 years ago
• rocknsm / rock-createiso
  Scripts used to create ISO installers of ROCK for offline installation.
  ☆10Updated 2 years ago
• JamesHabben / sysmon-queries
  Queries to parse sysmon event log file with microsoft logparser
  ☆58Updated 10 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 6 years ago
• exp0se / harbinger
  Harbinger Threat Intelligence
  ☆83Updated 10 years ago
• jonschipp / mal-dnssearch
  Compare multiple log formats against malware reputation lists.
  ☆88Updated 8 years ago
• P1llus / ArcSight-Rest
  Python library for the ArcSight logger REST API
  ☆27Updated 4 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 7 years ago
• BinaryDefense / auto-ossec
  ☆142Updated last year
• oneoffdallas / check_ioc
  Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was …
  ☆79Updated 8 years ago
• IBM / data-import
  ☆48Updated 10 years ago
• MHaggis / sysmon-splunk-app
  Sysmon Splunk App
  ☆47Updated 7 years ago
• juju4 / ansible-mhn
  Modern Honey Network deployment with ansible
  ☆12Updated 3 years ago
• hashtagcyber / bropy
  Basic Anomaly IDS capabilities with Python and Bro
  ☆105Updated 7 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 7 years ago
• coolacid / logstash-filter-virustotal
  Virustotal Lookup filter for Logstash
  ☆16Updated 8 years ago
• SMAPPER / NXLog-AutoConfig
  ☆50Updated 5 years ago
• n3l5 / irFARTpull
  PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.
  ☆51Updated 8 years ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 3 years ago
• initconf / brocon-15
  brocon-15 scripts
  ☆13Updated 8 years ago
• lruppert / bro-scripts
  Utilities and scripts for bro-ids
  ☆23Updated 12 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 10 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆31Updated 10 years ago
• unstable-deadlock / bro-elk-IDS
  ☆15Updated 6 years ago
• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 9 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆71Updated 8 years ago
• open-nsm / ContainNSM
  Dockerfiles for NSM tools
  ☆84Updated 8 years ago
• criticalstack / bro-scripts
  ☆72Updated 4 years ago