Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆198Oct 6, 2025Updated last year
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆37Oct 21, 2026Updated last week
- Meer is a "spooler" for Suricata / Sagan.☆30Jun 21, 2023Updated 3 years ago
- automatic enumeration and maintenance of Suricata monitoring interfaces☆12Dec 10, 2019Updated 6 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆507Oct 21, 2026Updated last week
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆229Feb 9, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- Suricata rules for network anomaly detection☆184May 7, 2026Updated 5 months ago
- Suricata rule and intel index☆35Oct 2, 2026Updated 3 weeks ago
- provides a Suricata Eve output for Kafka with Suricate Eve plugin☆16Nov 25, 2021Updated 4 years ago
- A Networking Packet Capture and Flow Analysis Operator☆16Mar 18, 2022Updated 4 years ago
- Auditd CEF support via Audispd plugin☆11Oct 23, 2014Updated 12 years ago
- A curated list of awesome things related to Suricata☆246Aug 20, 2026Updated 2 months ago
- This Script will walk you through creating elastalert rules☆11Dec 18, 2018Updated 7 years ago
- ☆13Apr 8, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆84Jun 25, 2026Updated 4 months ago
- Personal scripts☆15Sep 11, 2024Updated 2 years ago
- A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…☆524Oct 17, 2026Updated last week
- Tenzir is the data pipeline engine for security teams.☆769Updated this week
- This repo contains implementation of IP2Vec model which is used for learning similarities between IP Addresses☆13Oct 7, 2025Updated last year
- Collector/Correlator, Embedded log-based WAF, AI Patterns Classifier☆65Updated this week
- A commercial grade threat intelligence feed thats validated and updated every half hour.☆19Mar 24, 2023Updated 3 years ago
- Time series graphing on the client side☆10Aug 5, 2026Updated 2 months ago
- Snort/Suricata DAQ module with DPDK patch☆12Apr 10, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆58Oct 20, 2026Updated last week
- Automatic detection engineering technical state compliance☆55Jul 7, 2024Updated 2 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.org☆43Jun 12, 2016Updated 10 years ago
- Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors i…☆897Updated this week
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,465Updated this week
- Security event correlation engine for ELK stack☆446Aug 19, 2026Updated 2 months ago
- Suricata Verification Tests - Testing Suricata Output☆125Updated this week
- ☆13Feb 25, 2021Updated 5 years ago
- Shell Language Processing (SLP). Pre-processing of sh/bash/zsh/.. commands for Machine Learning models.☆39Nov 26, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Rule sets for Sagan☆105Jan 7, 2021Updated 5 years ago
- ☆34Jun 22, 2021Updated 5 years ago
- A collection of plugin extensions for netbox, including generic wrappers around NetBox objects☆17Apr 11, 2022Updated 4 years ago
- Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.☆8,147Updated this week
- Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own in…☆4,950Updated this week
- TaZmen Sniffer Protocol (TZSP) parser in Go☆20Dec 30, 2016Updated 9 years ago
- Only for educational purposes☆11Jun 17, 2023Updated 3 years ago