quadrantsec / saganLinks
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆170Updated 2 months ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below
Sorting:
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆170Updated 2 years ago
- Suricata rules for network anomaly detection☆164Updated last month
- Open source endpoint agent providing host information to Zeek. [v2]☆81Updated last week
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆81Updated last month
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆110Updated last year
- Open Source Security Information and event Management☆93Updated 9 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆458Updated last week
- Suricata Extreme Performance Tuning guide - Mark II☆117Updated 7 years ago
- Scirius is a web application for Suricata ruleset management and threat hunting.☆651Updated 2 weeks ago
- Passive Real-time Asset Detection System☆238Updated last year
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆408Updated this week
- Tool for managing Zeek deployments.☆56Updated last month
- The tool for updating your Suricata rules.☆271Updated last month
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆26Updated last year
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆53Updated last month
- Argus Sensor☆64Updated 2 weeks ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆153Updated 2 months ago
- Suricata Extreme Performance Tuning guide☆209Updated 7 years ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆40Updated 2 years ago
- A curated list of awesome things related to Suricata☆174Updated 2 months ago
- Plugin providing native AF_Packet support for Zeek.☆34Updated last year
- Documentation of Cortex☆174Updated last year
- Suricata, Snort and Zeek IDS rule and pcap testing system☆479Updated last week
- ☆29Updated last week
- Meer is a "spooler" for Suricata / Sagan.☆30Updated last year
- Mapping NSM rules to MITRE ATT&CK☆71Updated 4 years ago
- a network packet capture compiler☆199Updated 3 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆261Updated 2 years ago
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆228Updated 4 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆92Updated 3 years ago