Open Source SIEM Stack
☆158Sep 23, 2026Updated this week
Alternatives and similar repositories for OSSIEM
Users that are interested in OSSIEM are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open Source SIEM Stack☆32Oct 15, 2024Updated last year
- SOCFortress CoPilot☆529Updated this week
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,394Mar 11, 2026Updated 6 months ago
- Repo to hold mcp server for velociraptor☆41Apr 15, 2026Updated 5 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆34Sep 26, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Playbooks for SOC Analysts☆757Dec 11, 2022Updated 3 years ago
- A detailed list of potentially dangerous file extensions☆18Jun 18, 2025Updated last year
- Ansible playbook to convert Sigma rules to ElastAlert rules☆10Feb 5, 2021Updated 5 years ago
- This contains scripts, tools, and other programs I show case on my youtube channel.☆29Oct 30, 2025Updated 10 months ago
- Python pyVmomi plugin for Icinga☆14Aug 23, 2018Updated 8 years ago
- Easily scan with multiple yara rules from different sources.☆14Mar 9, 2024Updated 2 years ago
- Dockerised GUI Mail Server (Forked from Dockerised Mail Server that is extended to support MySQL & PostgreSQL which works well with Postf…☆14Jan 3, 2022Updated 4 years ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- ☆32Aug 21, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- OpenAEV Docker deployment helpers☆30Updated this week
- ☆22Apr 1, 2026Updated 5 months ago
- Collections of RouterOS scripts mainly for Routeros v7☆14Dec 3, 2024Updated last year
- Wazuh - Docker containers☆1,188Updated this week
- Files related to my Graylog home lab setup☆25Dec 5, 2024Updated last year
- Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.☆583Updated this week
- PowerShell scripts to facilitate Cross-Tenant migrations!☆13Aug 10, 2023Updated 3 years ago
- An Exploitation script developed to exploit the CVE-2023-4966 bleed citrix information disclosure vulnerability☆10Oct 29, 2023Updated 2 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Deploy pfelk with docker-compose☆53Aug 13, 2023Updated 3 years ago
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆27Jun 19, 2024Updated 2 years ago
- 🚀 IRIS-SOAR: Modular SOAR (Security Orchestration, Automation, and Response) implementation in Python. Designed to complement DFIR-IRIS …☆17Mar 27, 2024Updated 2 years ago
- The PCI DSS Compliance Toolkit is an open-source project aimed at helping organizations achieve and maintain compliance with the (PCI DS…☆24Dec 13, 2023Updated 2 years ago
- Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.☆2,444Updated this week
- Docker image for Velocidex Velociraptor☆149Apr 15, 2026Updated 5 months ago
- Collaborative, web-based case management for incident response☆25Jan 23, 2024Updated 2 years ago
- (Unofficial) Wazuh integration to send alerts to IRIS.☆23Jan 1, 2025Updated last year
- Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks☆25Aug 8, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆17Oct 28, 2021Updated 4 years ago
- Threat hunting queries, Sigma rules, and detection engineering research based on MITRE ATT&CK techniques.☆45Sep 10, 2026Updated 2 weeks ago
- T-Guard Repository☆18May 2, 2024Updated 2 years ago
- Monitoring Windows processes tool for malware analysis. Inspired by Regshot tool.☆15Jun 24, 2024Updated 2 years ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques and operations assisted with LLMs. Built f…☆220Nov 23, 2025Updated 10 months ago
- Veeam Hardening Script for Windows (CIS contents)☆24Apr 21, 2026Updated 5 months ago