Open Source SIEM Stack
☆153Jul 13, 2026Updated 2 weeks ago
Alternatives and similar repositories for OSSIEM
Users that are interested in OSSIEM are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open Source SIEM Stack☆30Oct 15, 2024Updated last year
- SOCFortress CoPilot☆510Updated this week
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,362Mar 11, 2026Updated 4 months ago
- Autonomous SOC analyst agent for SOCfortress CoPilot — auto-investigates alerts, enriches IOCs, and writes back findings using Claude + l…☆89Jul 17, 2026Updated last week
- Repo to hold mcp server for velociraptor☆40Apr 15, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆33Sep 26, 2024Updated last year
- Repo to hold wazuh manager mcp server☆87Apr 15, 2026Updated 3 months ago
- Playbooks for SOC Analysts☆737Dec 11, 2022Updated 3 years ago
- A detailed list of potentially dangerous file extensions☆18Jun 18, 2025Updated last year
- Singul: Connect to your favorite services with a Singul line of code.☆27Updated this week
- Laravel Activity Log UI is a Tailwind CSS-powered user interface for the popular Spatie Laravel Activitylog package. It provides an easy-…☆16Dec 1, 2024Updated last year
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- This contains scripts, tools, and other programs I show case on my youtube channel.☆25Oct 30, 2025Updated 8 months ago
- A production ready Dockered MISP☆378Jul 13, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Dockerised GUI Mail Server (Forked from Dockerised Mail Server that is extended to support MySQL & PostgreSQL which works well with Postf…☆15Jan 3, 2022Updated 4 years ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- ☆37Dec 25, 2025Updated 7 months ago
- ☆32Aug 21, 2024Updated last year
- Repository for Zabbix Microsoft 365 Monitoring☆14Jul 11, 2025Updated last year
- A few sample Intune scripts and configuration profiles for setting up MacOS and Windows devices in a corporate environment☆15Oct 26, 2020Updated 5 years ago
- ☆23Apr 1, 2026Updated 3 months ago
- A command-line tool and module for the free Sublime Analysis API☆16Jun 18, 2024Updated 2 years ago
- Files related to my Graylog home lab setup☆25Dec 5, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.☆578Updated this week
- PersonaAI is a versatile tool designed to perform psychological profiling based on a person's Facebook ID.☆12Aug 21, 2024Updated last year
- ☆80May 21, 2025Updated last year
- Deploy pfelk with docker-compose☆55Aug 13, 2023Updated 2 years ago
- An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability☆10Oct 29, 2023Updated 2 years ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆17Mar 27, 2024Updated 2 years ago
- The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DS…☆22Dec 13, 2023Updated 2 years ago
- This is a Project Designed for Security Analysts and all SOC audiences who wants to play with implementation and explore the Modern SOC a…☆742Sep 23, 2024Updated last year
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,362Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This repository will describe the details surrounding the SIEM (wazuh) mini project, which will cover all aspects of topology design, dep…☆29Mar 19, 2023Updated 3 years ago
- Docker image for Velocidex Velociraptor☆149Apr 15, 2026Updated 3 months ago
- Collaborative, web-based case management for incident response☆24Jan 23, 2024Updated 2 years ago
- (Unofficial) Wazuh integration to send alerts to IRIS.☆23Jan 1, 2025Updated last year
- Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks☆25Aug 8, 2020Updated 5 years ago
- ☆16Oct 28, 2021Updated 4 years ago
- Threat hunting queries, Sigma rules, and detection engineering research based on MITRE ATT&CK techniques.☆37Jul 21, 2026Updated last week