Alternatives and similar repositories for argus

Users that are interested in argus are comparing it to the libraries listed below

• openargus / clients
  Argus clients program repo
  ☆23Updated last week
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆189Updated last year
• quadrantsec / sagan
  Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…
  ☆188Updated last month
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆115Updated last week
• cisco / mercury
  Mercury: network metadata capture and analysis
  ☆482Updated 2 weeks ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆282Updated last week
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆86Updated last week
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆81Updated 3 weeks ago
• stratosphereips / zeek_anomaly_detector
  A completely automated anomaly detector Zeek network flows files (conn.log).
  ☆82Updated 3 months ago
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆91Updated 6 months ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆439Updated this week
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆120Updated 7 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆171Updated 2 years ago
• StamusNetworks / suricata-4-analysts
  The Security Analyst’s Guide to Suricata
  ☆60Updated 6 months ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆56Updated this week
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆502Updated last month
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆101Updated 2 years ago
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆175Updated 2 weeks ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆94Updated last year
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆248Updated last year
• thongsia / Public-Pcaps
  ☆59Updated 7 years ago
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆158Updated 7 months ago
• seanlinmt / suricata
  OpenWRT Suricata package
  ☆54Updated 7 years ago
• SeisoLLC / zeek-kafka
  A Zeek log writer plugin that publishes to Kafka.
  ☆51Updated 2 months ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆31Updated last year
• tklab-tud / ID2T
  Official ID2T repository. ID2T creates labeled IT network datasets that contain user defined synthetic attacks.
  ☆64Updated 2 years ago
• stratosphereips / StratosphereLinuxIPS
  Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors i…
  ☆840Updated this week
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆213Updated 7 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆471Updated 2 weeks ago
• xnih / satori
  Python rewrite of passive OS fingerprinting tool
  ☆190Updated 6 months ago