Alternatives and similar repositories for suricata-graylog

Users that are interested in suricata-graylog are comparing it to the libraries listed below

• OwlH-net / OwlH-UI
  OwlH Master API Web User Interface
  ☆12Updated last year
• siemonster / logstash
  Example configuration files for Logstash
  ☆44Updated 6 years ago
• Homas / ioc2rpz
  ioc2rpz is a place where threat intelligence meets DNS.
  ☆112Updated 9 months ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆155Updated last year
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆107Updated last year
• Graylog2 / graylog-guide-snort
  How to send structured Snort IDS alert logs into Graylog
  ☆27Updated last month
• juju4 / ansible-MISP
  ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing
  ☆54Updated this week
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆171Updated 2 years ago
• StamusNetworks / KTS7
  Kibana 7 Templates for Suricata IDPS Threat Hunting
  ☆43Updated last month
• StamusNetworks / KTS6
  Kibana 6 Templates for Suricata IDPS Threat Hunting
  ☆24Updated 6 years ago
• counteractive / o365beat
  Elastic Beat for fetching and shipping Office 365 audit events
  ☆68Updated 5 years ago
• alias454 / graylog-zeek-content-pack
  BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to captu…
  ☆19Updated 5 years ago
• empow / logstash-parsers
  ☆38Updated 6 years ago
• Alir3z4 / ansible-suricata
  An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.
  ☆17Updated 4 years ago
• Nclose-ZA / elastalert_hive_alerter
  This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
  ☆27Updated 4 years ago
• Sikkandar-Sha / SEC-AUDIT
  PowerShell Script for Windows Server Compliance / Security Configuration Audit
  ☆62Updated 9 years ago
• topranks / MS17-010_SUBNET
  MS17-010 Windows SMB RCE -- Full subnet scanner
  ☆24Updated 8 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 5 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆68Updated 5 years ago
• sneakymonk3y / foxhound-nsm
  Foxhound: Blackbox - A Raspberry Pi NSM
  ☆37Updated 7 years ago
• tenable / Posh-Nessus
  PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
  ☆88Updated 2 years ago
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 4 years ago
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 4 years ago
• CityBaseInc / SIAC
  SIAC is an enterprise SIEM built on open-source technology.
  ☆115Updated 7 years ago
• PaloAltoNetworks / minemeld-misp
  MineMeld nodes for MISP
  ☆19Updated last year
• socprime / soc_workflow_app_ce
  SOC Workflow App helps Security Analysts and Threat Hunters explore suspicious events, look into raw events arriving at the Elastic Stack…
  ☆94Updated 3 years ago
• deeso / fleet-deployment
  ☆15Updated 6 years ago
• alertflex / altprobe
  collector/runner
  ☆65Updated 2 months ago
• TheHive-Project / Synapse
  Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform
  ☆71Updated 2 years ago
• telekom-security / listbot
  🤖 Daily updated translation maps for T-Pot
  ☆22Updated last year