quadrantsec / saganLinks
Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather than network packets.
☆188Updated 2 weeks ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆173Updated last week
- Open source endpoint agent providing host information to Zeek. [v2]☆86Updated last month
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆435Updated last week
- A curated list of awesome things related to Suricata☆200Updated 7 months ago
- The tool for updating your Suricata rules.☆280Updated 3 weeks ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆90Updated 5 months ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆43Updated last week
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆469Updated this week
- ☆34Updated last week
- Docker configurations for TheHive, Cortex and 3rd party tools☆126Updated 2 years ago
- ☆60Updated this week
- Fast and efficient osquery management☆468Updated this week
- Open Source Security Information and event Management☆102Updated 10 years ago
- The Wazuh agent for endpoints.☆85Updated 3 months ago
- OwlH Master API☆24Updated 5 months ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆158Updated 6 months ago
- Suricata Verification Tests - Testing Suricata Output☆115Updated this week
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆28Updated 2 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆95Updated 3 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆107Updated last year
- Wazuh - Tools for packages creation☆114Updated 10 months ago
- Security event correlation engine for ELK stack☆446Updated last year
- Passive Real-time Asset Detection System☆248Updated last year
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆112Updated last year
- Wazuh - Splunk App☆56Updated last year
- ☆52Updated last week
- Zeek IDS Dockerfile☆101Updated 2 years ago
- OpenCTI Docker deployment helpers☆208Updated this week
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆56Updated 3 weeks ago