simple-evcorr / rulesetsLinks
Simple Event Correlator ruleset repository
☆31Updated 4 years ago
Alternatives and similar repositories for rulesets
Users that are interested in rulesets are comparing it to the libraries listed below
Sorting:
- Simple Event Correlator releases☆183Updated last year
- A library and a tool for converting audit logs to XML and JSON☆46Updated 7 years ago
- This is the official main repository for the Assimilation project☆51Updated last year
- ☆55Updated 9 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆57Updated 2 weeks ago
- network message encapsulation library☆30Updated last month
- Time-Machine Dynamic Bulk Packet Recorder☆36Updated 7 months ago
- Network visualizer tool built using Processing☆24Updated 4 years ago
- ☆41Updated 4 years ago
- server for indexing and querying passive DNS observations☆49Updated 2 weeks ago
- Enterprise Log Search and Archive☆211Updated 6 years ago
- Entrada - A tool for DNS big data analytics☆50Updated last year
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆189Updated last year
- Manages continuous scans of your infrastructure☆107Updated 3 years ago
- Syslog Deduplicator☆16Updated 12 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Updated 7 years ago
- sudosh is an auditing shell filter and can be used as a login shell. Sudosh records all keystrokes and output and can play back the sessi…☆89Updated last year
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆229Updated 4 years ago
- CEF plugin for audisp (Linux Audit)☆23Updated 9 years ago
- Creating network diagrams with Graphviz☆72Updated 9 years ago
- graph visualization tool☆78Updated 10 years ago
- Potiron - Normalize, Index and Visualize Network Capture☆88Updated 6 years ago
- Tools for inspecting disk images☆25Updated 7 years ago
- Simple Python program to parse OpenSCAP result files and give results☆52Updated last year
- A kerberos KDC HTTP/HTTPS proxy WSGI module☆62Updated 2 weeks ago
- IPFIXcol is an implementation of an IPFIX (RFC 7011) collector☆65Updated 5 years ago
- Tools for security content automation, baseline tailoring, and overlay development.☆45Updated last year
- A network security policy compiler. Netspoc is targeted at environments with a large number of firewalls and admins. Firewall rules are d…☆75Updated last week
- A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI☆69Updated 3 months ago
- A 'Universal WHOIS' proxy server - you query it, it gives back the correct details☆42Updated last week