Alternatives and similar repositories for security-analytics

Users that are interested in security-analytics are comparing it to the libraries listed below

• SumoLogic / cloud-siem-content-catalog
  ☆26Updated last week
• FoxIO-LLC / LogSlash
  A standard for reducing log volume without sacrificing analytical capability
  ☆207Updated 5 months ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆85Updated last month
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆128Updated last year
• runreveal / sigmalite
  ☆45Updated 4 months ago
• Shuffle / python-apps
  Apps to be used for Shuffle automation. Most of Shuffle's apps (2500+) are generated from APIs, and available in the search engine below:
  ☆116Updated last week
• z1pti3 / jimi
  Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …
  ☆166Updated last year
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆161Updated this week
• center-for-threat-informed-defense / mappings-explorer
  Mappings Explorer enables cyber defenders to understand how security controls and capabilities map onto the adversary behaviors catalogue…
  ☆69Updated 2 weeks ago
• OpenCTI-Platform / client-python
  OpenCTI Python Client
  ☆141Updated this week
• SygniaLabs / Mirage
  ☆74Updated 4 months ago
• google / osdfir-infrastructure
  Helm charts for running open source digital forensic tools in Kubernetes
  ☆108Updated last week
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆155Updated 5 months ago
• SigmaHQ / sigma-cli
  The Sigma command line interface based on pySigma
  ☆158Updated 3 months ago
• COSSAS / SOARCA
  SOARCA - The Open Source CACAO-based Security Orchestrator!
  ☆76Updated this week
• ocsf / examples
  This repo contains example of raw event examples and possible translations to the OCSF schema.
  ☆42Updated last week
• anvilogic-forge / armory
  Anvilogic Forge
  ☆105Updated last week
• dwillowtree / diana
  Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )
  ☆187Updated 11 months ago
• panther-labs / panther-analysis
  Built-in Panther detection rules and policies
  ☆407Updated this week
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆134Updated 11 months ago
• sublime-security / sublime-platform
  A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…
  ☆223Updated this week
• prowler-cloud / py-ocsf-models
  OCSF (https://schema.ocsf.io/) models in Python using Pydantic.
  ☆23Updated last week
• SAP / cloud-active-defense
  Add a layer of active defense to your cloud applications.
  ☆94Updated last week
• ocsf / ocsf-docs
  OCSF Documentation
  ☆137Updated last month
• infosecB / detection-as-code
  An example of how to deploy a Detection as Code pipeline using Sigma Rules, Sigmac, Gitlab CI, and Splunk.
  ☆57Updated 3 years ago
• Permiso-io-tools / CloudGrappler
  ☆262Updated 8 months ago
• traut / stixview
  STIX2 graph visualisation library in JS
  ☆90Updated last month
• OpenCTI-Platform / docker
  OpenCTI Docker deployment helpers
  ☆198Updated last week
• center-for-threat-informed-defense / insider-threat-ttp-kb
  The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…
  ☆143Updated 3 weeks ago
• Cargill / OpenSIEM-Logstash-Parsing
  SIEM Logstash parsing for more than hundred technologies
  ☆186Updated 3 weeks ago