Open Source SIEM Stack
☆154Jul 13, 2026Updated last month
Alternatives and similar repositories for OSSIEM
Users that are interested in OSSIEM are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SOCFortress CoPilot☆514Updated this week
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,378Mar 11, 2026Updated 5 months ago
- Autonomous SOC analyst agent for SOCfortress CoPilot — auto-investigates alerts, enriches IOCs, and writes back findings using Claude + l…☆89Updated this week
- Repo to hold mcp server for velociraptor☆39Apr 15, 2026Updated 4 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆33Sep 26, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Singul: Connect to your favorite services with a Singul line of code.☆26Jul 30, 2026Updated 2 weeks ago
- Laravel Activity Log UI is a Tailwind CSS-powered user interface for the popular Spatie Laravel Activitylog package. It provides an easy-…☆16Dec 1, 2024Updated last year
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- Easily scan with multiple yara rules from different sources.☆14Mar 9, 2024Updated 2 years ago
- A production ready Dockered MISP☆382Jul 13, 2026Updated last month
- Dockerised GUI Mail Server (Forked from Dockerised Mail Server that is extended to support MySQL & PostgreSQL which works well with Postf…☆15Jan 3, 2022Updated 4 years ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- IDPS-ESCAPE: Intrusion Detection and Prevention System - Enhanced Security through a Cooperative Anomaly Prediction Engine. SOAR via a Ri…☆15May 5, 2026Updated 3 months ago
- ☆33Aug 21, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- RF CTF SDR Challenge Controller☆15Updated this week
- OpenAEV Docker deployment helpers☆30Updated this week
- Some applications use SDNS to bypass DNS filters. You can block most public SDNS servers by using these blacklists or create your own lis…☆11Jan 12, 2022Updated 4 years ago
- ☆23Apr 1, 2026Updated 4 months ago
- Wazuh - Docker containers☆1,160Updated this week
- Files related to my Graylog home lab setup☆25Dec 5, 2024Updated last year
- Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.☆580Updated this week
- Deploy pfelk with docker-compose☆54Aug 13, 2023Updated 3 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆17Mar 27, 2024Updated 2 years ago
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆27Jun 19, 2024Updated 2 years ago
- The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DS…☆22Dec 13, 2023Updated 2 years ago
- This is a Project Designed for Security Analysts and all SOC audiences who wants to play with implementation and explore the Modern SOC a…☆743Sep 23, 2024Updated last year
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,411Updated this week
- This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, dep…☆30Mar 19, 2023Updated 3 years ago
- Docker image for Velocidex Velociraptor☆149Apr 15, 2026Updated 4 months ago
- Collaborative, web-based case management for incident response☆24Jan 23, 2024Updated 2 years ago
- ☆19Apr 13, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- (Unofficial) Wazuh integration to send alerts to IRIS.☆23Jan 1, 2025Updated last year
- Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks☆25Aug 8, 2020Updated 6 years ago
- ☆16Oct 28, 2021Updated 4 years ago
- Threat hunting queries, Sigma rules, and detection engineering research based on MITRE ATT&CK techniques.☆37Aug 11, 2026Updated last week
- T-Guard Repository☆18May 2, 2024Updated 2 years ago
- Monitoring Windows processes tool for malware analysis. Inspired by Regshot tool.☆14Jun 24, 2024Updated 2 years ago
- Graylog extractor☆34Dec 17, 2022Updated 3 years ago