quadrantsec / saganLinks
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆184Updated 4 months ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below
Sorting:
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆85Updated 3 weeks ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆41Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆421Updated this week
- The tool for updating your Suricata rules.☆277Updated 2 weeks ago
- Suricata rules for network anomaly detection☆167Updated 3 months ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆461Updated this week
- ☆33Updated this week
- Open Source Security Information and event Management☆98Updated 9 years ago
- Suricata Verification Tests - Testing Suricata Output☆112Updated 2 weeks ago
- ☆55Updated this week
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆83Updated 3 months ago
- Security event correlation engine for ELK stack☆440Updated last year
- Docker configurations for TheHive, Cortex and 3rd party tools☆126Updated 2 years ago
- A curated list of awesome things related to Suricata☆185Updated 4 months ago
- Passive Real-time Asset Detection System☆244Updated last year
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆106Updated last year
- OwlH Master API☆24Updated 3 months ago
- ☆48Updated this week
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆248Updated 2 weeks ago
- Jimi is an automation first no-code platform designed and developed originally for Security Orchestration and Response. Since its launch …☆166Updated last year
- The Wazuh agent for endpoints.☆78Updated 3 weeks ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆263Updated 2 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆111Updated last year
- Suricata IDS/IPS log analytics using the Elastic Stack.☆239Updated 4 years ago
- This project is a SIEM with SIRP and Threat Intel, all in one.☆455Updated 8 months ago
- A Suricata Docker image.☆291Updated last week
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆78Updated last month
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆181Updated 10 months ago