shadonet / pfSense-pkg-zeekLinks
Zeek (formerly Bro) Network Security Monitor package for pfSense router/firewall
☆47Updated 4 years ago
Alternatives and similar repositories for pfSense-pkg-zeek
Users that are interested in pfSense-pkg-zeek are comparing it to the libraries listed below
Sorting:
- Run zeek with zeekctl in docker☆62Updated last year
- MISP Docker (XME edition)☆282Updated 2 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆172Updated 2 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆108Updated last year
- ☆143Updated last month
- Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.☆87Updated 8 months ago
- Run Velociraptor on Security Onion☆40Updated 3 years ago
- ☆28Updated 6 years ago
- Main MineMeld documentation repo☆380Updated 8 years ago
- Documentation for ROCK NSM☆27Updated 4 years ago
- Documentation of Cortex☆174Updated 2 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆94Updated 3 years ago
- Zeek Log Cheatsheets☆302Updated 5 months ago
- A curated list of awesome things related to TheHive & Cortex☆184Updated 4 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Docker configurations for TheHive, Cortex and 3rd party tools☆128Updated 3 years ago
- Salt States for Configuring the SIFT Workstation☆106Updated last week
- ☆225Updated 2 years ago
- Corelight@Home script☆45Updated 2 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆269Updated 2 years ago
- The FASTEST way to consume threat intel.☆69Updated 2 years ago
- A website and framework for testing NIDS detection☆57Updated 4 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated 2 years ago
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆71Updated 4 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated 4 months ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆258Updated 2 years ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆189Updated 4 years ago
- Leverage Sophos Central API☆30Updated 2 years ago
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Updated 4 years ago
- WebUI of MineMeld☆43Updated 2 years ago