quadrantsec / saganLinks
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆175Updated 2 months ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆164Updated 2 months ago
- ☆30Updated this week
- A curated list of awesome things related to Suricata☆180Updated 3 months ago
- Open source endpoint agent providing host information to Zeek. [v2]☆83Updated last week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆415Updated this week
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆461Updated 2 weeks ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆170Updated 2 years ago
- Passive Real-time Asset Detection System☆243Updated last year
- The tool for updating your Suricata rules.☆273Updated 2 weeks ago
- Open Source Security Information and event Management☆94Updated 9 years ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆41Updated 2 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆117Updated 7 years ago
- Docker image for MISP☆130Updated this week
- Suricata Verification Tests - Testing Suricata Output☆109Updated this week
- The Security Analyst’s Guide to Suricata☆56Updated last month
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆93Updated 3 years ago
- A curated list of awesome things related to TheHive & Cortex☆180Updated 3 years ago
- Open Source SIEM (Security Information and Event Management system).☆213Updated last year
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆26Updated last year
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆106Updated last year
- Suricata Extreme Performance Tuning guide☆209Updated 7 years ago
- OpenCTI Docker deployment helpers☆185Updated last week
- Scirius is a web application for Suricata ruleset management and threat hunting.☆654Updated this week
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆110Updated last year
- Suricata, Snort and Zeek IDS rule and pcap testing system☆480Updated last month
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆153Updated 2 months ago
- SIEM Tactics, Techiques, and Procedures☆633Updated this week
- Zeek-Formatted Threat Intelligence Feeds☆370Updated this week
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…☆362Updated this week