Alternatives and similar repositories for OSSIEM

Users that are interested in OSSIEM are comparing it to the libraries listed below

• socfortress / CoPilot
  SOCFortress CoPilot
  ☆397Updated this week
• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆31Updated last year
• juaromu / wazuh-opencti
  ☆39Updated 2 years ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆88Updated last week
• dLoProdz / OSSIEM
  Open Source SIEM Stack
  ☆27Updated last year
• WithSecureLabs / Kanvas
  A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.
  ☆406Updated last month
• tguard-soc-package / nusantara
  ☆218Updated last year
• gbrigandi / mcp-server-wazuh
  MCP Server for Wazuh SIEM
  ☆140Updated 4 months ago
• itiligent / Easy-OpenVAS-Installer
  2025 OpenVAS appliance install & upgrade scripts, includes https front end (self signed), authenticated SMB scanning & email reports
  ☆85Updated last month
• MISP / misp-docker
  A production ready Dockered MISP
  ☆290Updated this week
• ls111-cybersec / thehive-cortex-misp-docker-compose-lab11update
  ☆31Updated 2 years ago
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆1,135Updated 3 weeks ago
• bitorscanner / Bitor
  Bitor Scanning Software
  ☆431Updated last week
• socfortress / wazuh-mcp-server
  Repo to hold wazuh manager mcp server
  ☆65Updated last month
• 3CORESec / testmynids.org
  A website and framework for testing NIDS detection
  ☆299Updated 4 months ago
• utmstack / UTMStack
  Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
  ☆359Updated this week
• stanfrbd / cyberbro
  A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
  ☆471Updated last week
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆140Updated 8 months ago
• yevonnaelandrew / t-guard
  T-Guard Repository
  ☆17Updated last year
• nateuribe / Wazuh-IRIS-integration
  (Unofficial) Wazuh integration to send alerts to IRIS.
  ☆19Updated 10 months ago
• OpenSecureCo / Demos
  Repo Filled With Follow Along Guides
  ☆80Updated 3 years ago
• ls111-cybersec / wazuh-thehive-integration-ep13
  ☆22Updated 2 years ago
• splunk / DECEIVE
  DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
  ☆268Updated 5 months ago
• alextibor / wazuh-fortigate-rules-decoders
  Decoders and Rules for Fortigate in Wazuh
  ☆53Updated last year
• OpenSecureCo / Wazuh
  ☆32Updated 3 years ago
• crow1011 / wazuh2thehive
  Wazuh integration TheHive
  ☆40Updated 2 years ago
• juaromu / wazuh-misp
  ☆19Updated 2 years ago
• zdhenard42 / SOC-Multitool
  A powerful and user-friendly browser extension that streamlines investigations for security professionals.
  ☆408Updated 6 months ago
• Krook9d / TA-Purplelab-Splunk
  Splunk add-on related to the PurpleLab tool
  ☆41Updated last year
• OpenAEV-Platform / docker
  OpenAEV Docker deployment helpers
  ☆24Updated last week