simple-evcorr / rulesets
Simple Event Correlator ruleset repository
☆31Updated 3 years ago
Alternatives and similar repositories for rulesets:
Users that are interested in rulesets are comparing it to the libraries listed below
- Simple Event Correlator releases☆180Updated 5 months ago
- Blackhole Router Site☆32Updated last year
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 11 months ago
- Network visualizer tool built using Processing☆24Updated 3 years ago
- A daemon that subscribes to packet capture requests via pubsub and posts the data to a configurable destination☆32Updated 7 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated this week
- server for indexing and querying passive DNS observations☆46Updated last month
- This is the official main repository for the Assimilation project☆51Updated 9 months ago
- graph visualization tool☆78Updated 9 years ago
- [DEPRECATED] CEF (Common Event Format) input plugin for Graylog☆10Updated 3 years ago
- No elephant flows - flow shunting for Arista switches using EOS API☆27Updated 3 years ago
- BGPmon☆16Updated 11 years ago
- multiplexing SNMP query engine☆20Updated last year
- Syslog Deduplicator☆16Updated 11 years ago
- Convert an IOS/NXOS/ACE/ASA config file into basic HTML, creating links between commands referencing lists and that list (e.g. access lis…☆14Updated 6 years ago
- Network Analysis using ElasticSearch and Kibana☆45Updated 8 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Updated 7 years ago
- ☆41Updated 4 years ago
- A library and a tool for converting audit logs to XML and JSON☆45Updated 7 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆53Updated 3 weeks ago
- Bro script package to create JSON formatted logs to stream into data analysis systems.☆28Updated last year
- ☆55Updated 8 years ago
- An application to extract User-to-IP mappings from RADIUS accounting data and send them to Palo Alto firewalls for use by the User-ID fun…☆34Updated 2 years ago
- ruby library and executable to (de)crypt various router/switch password (IOS, NXOS, JunOS)☆17Updated last year
- Enterprise Log Search and Archive☆209Updated 6 years ago
- A package manager for Zeek☆44Updated 4 months ago
- DEAD: Qbana (Ω) is a Kibana3 Fork with additional (DEPRECATED)☆86Updated 9 years ago
- My Ansible playbook for a CentOS 6 based infrastructure.☆57Updated 10 years ago
- Tool for managing Zeek deployments.☆54Updated last month