shadonet / pfSense-pkg-zeekLinks
Zeek (formerly Bro) Network Security Monitor package for pfSense router/firewall
☆47Updated 4 years ago
Alternatives and similar repositories for pfSense-pkg-zeek
Users that are interested in pfSense-pkg-zeek are comparing it to the libraries listed below
Sorting:
- MISP Docker (XME edition)☆283Updated last year
- Run zeek with zeekctl in docker☆56Updated last year
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆107Updated last year
- Documentation for ROCK NSM☆27Updated 4 years ago
- ☆222Updated 2 years ago
- ☆28Updated 5 years ago
- Salt States for Configuring the SIFT Workstation☆107Updated 3 weeks ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆94Updated 3 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆264Updated 2 years ago
- ☆50Updated 5 years ago
- Run Velociraptor on Security Onion☆40Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆73Updated last month
- A website and framework for testing NIDS detection☆57Updated 4 years ago
- ☆142Updated 3 months ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆27Updated 4 years ago
- Evolving directions on building the best Open Source Forensics VM☆161Updated 7 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- This is a repository for freq.py and freq_server.py☆211Updated 5 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Updated 4 years ago
- Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases☆155Updated last year
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆112Updated last year
- Documentation of Cortex☆175Updated 2 years ago
- A curated list of awesome things related to TheHive & Cortex☆182Updated 4 years ago
- Leverage Sophos Central API☆30Updated 2 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆157Updated 8 months ago
- Main MineMeld documentation repo☆379Updated 8 years ago
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆43Updated 3 weeks ago
- Integrate Zeek with Alienvault OTX☆25Updated 5 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated 2 years ago