Alternatives and similar repositories for pfSense-pkg-zeek

Users that are interested in pfSense-pkg-zeek are comparing it to the libraries listed below

• activecm / docker-zeek
  Run zeek with zeekctl in docker
  ☆60Updated last year
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆108Updated last year
• MISP / x_old_misp_docker
  MISP Docker (XME edition)
  ☆283Updated 2 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆171Updated 2 years ago
• Nclose-ZA / elastalert_hive_alerter
  This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.
  ☆27Updated 4 years ago
• bestpractical / rtir
  ☆143Updated last month
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 4 years ago
• corelight / raspi-corelight
  Corelight@Home script
  ☆46Updated 2 years ago
• teamdfir / sift-saltstack
  Salt States for Configuring the SIFT Workstation
  ☆106Updated last month
• TheHive-Project / awesome
  A curated list of awesome things related to TheHive & Cortex
  ☆182Updated 4 years ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆71Updated 4 years ago
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆94Updated 3 years ago
• rocknsm / rock-docs
  Documentation for ROCK NSM
  ☆27Updated 4 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆174Updated 2 years ago
• TheHive-Project / TheHive4py
  Python API Client for TheHive
  ☆233Updated last month
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆269Updated 2 years ago
• Graylog2 / graylog-plugin-threatintel
  Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
  ☆155Updated last year
• cmu-sei / topgen
  Scripts to generate an Internet simulation
  ☆36Updated last year
• weslambert / securityonion-misp
  ☆37Updated 5 years ago
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated 2 years ago
• HKcyberstark / wazuh-ecs
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆28Updated 5 years ago
• LetMeR00t / TA-thehive-cortex
  Technical add-on for Splunk related to TheHive/Cortex from TheHive project
  ☆53Updated 3 months ago
• theflakes / sigma_to_wazuh
  Convert Sigma rules to Wazuh rules
  ☆73Updated 3 months ago
• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆254Updated 4 years ago
• MISP / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆104Updated 2 years ago
• shadow-box / Palo-Alto-Networks-ELK-Stack
  Configuration for a Palo Alto Networks fed ELK Stack with Visualizations
  ☆75Updated 6 years ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆40Updated 3 years ago
• MarkBaggett / domain_stats
  ☆224Updated 2 years ago
• MSISAC / STIX-TAXII-Integration
  ☆28Updated 6 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 5 years ago