quadrantsec / saganLinks
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆185Updated 4 months ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below
Sorting:
- Open source endpoint agent providing host information to Zeek. [v2]☆85Updated this week
- Suricata rules for network anomaly detection☆167Updated 4 months ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆428Updated 2 weeks ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆462Updated last week
- The Wazuh agent for endpoints.☆79Updated last month
- Docker configurations for TheHive, Cortex and 3rd party tools☆126Updated 2 years ago
- ☆34Updated last week
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆83Updated 3 months ago
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆28Updated 2 years ago
- The tool for updating your Suricata rules.☆279Updated last month
- ☆49Updated last week
- A curated list of awesome things related to Suricata☆187Updated 5 months ago
- Open Source Security Information and event Management☆99Updated 9 years ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆41Updated 2 years ago
- ☆55Updated last week
- OwlH Master API☆24Updated 3 months ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆106Updated last year
- Open Source SIEM (Security Information and Event Management system).☆218Updated last year
- The Security Analyst’s Guide to Suricata☆57Updated 3 months ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆94Updated 3 years ago
- Osquery Resources☆61Updated 6 years ago
- The official Prelude SIEM GitHub of https://www.prelude-siem.org☆33Updated 9 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆263Updated 2 years ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆157Updated 4 months ago
- Wazuh - Project documentation☆224Updated this week
- Passive Real-time Asset Detection System☆246Updated last year
- Suricata Verification Tests - Testing Suricata Output☆112Updated this week
- Sample programs to access the API☆89Updated 3 months ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆68Updated 4 years ago