shadonet / pfSense-pkg-zeekLinks
Zeek (formerly Bro) Network Security Monitor package for pfSense router/firewall
☆46Updated 4 years ago
Alternatives and similar repositories for pfSense-pkg-zeek
Users that are interested in pfSense-pkg-zeek are comparing it to the libraries listed below
Sorting:
- Run zeek with zeekctl in docker☆51Updated 10 months ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆106Updated last year
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆170Updated 2 years ago
- Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases☆154Updated last year
- Salt States for Configuring the SIFT Workstation☆104Updated 2 weeks ago
- MISP Docker (XME edition)☆282Updated last year
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- Documentation of Cortex☆174Updated last year
- ☆138Updated this week
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆67Updated 3 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- A curated list of awesome things related to TheHive & Cortex☆180Updated 3 years ago
- Run Velociraptor on Security Onion☆38Updated 2 years ago
- Zeek Log Cheatsheets☆293Updated 2 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆111Updated last year
- ☆217Updated last year
- Ansible playbook automation for pfelk☆23Updated 3 years ago
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆82Updated 2 months ago
- ☆28Updated 5 years ago
- Convert Sigma rules to Wazuh rules☆67Updated last year
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆263Updated 2 years ago
- PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform☆148Updated 3 years ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆253Updated 2 years ago
- Python API Client for TheHive☆230Updated last week
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆94Updated 3 years ago
- A website and framework for testing NIDS detection☆57Updated 3 years ago
- Alert Wizard plugin for Graylog to manage the alert rules☆49Updated 2 weeks ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated 3 weeks ago
- All-in-one bundle of MISP, TheHive and Cortex☆169Updated 2 years ago
- Evolving directions on building the best Open Source Forensics VM☆160Updated 7 years ago