Alternatives and similar repositories for StratosphereLinuxIPS

Users that are interested in StratosphereLinuxIPS are comparing it to the libraries listed below

• StamusNetworks / Clear-NDR-ISO
  A Suricata based NDR distribution
  ☆1,583Updated 3 months ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆510Updated 2 weeks ago
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆448Updated this week
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,294Updated last week
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆669Updated 3 months ago
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆1,099Updated 2 weeks ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆476Updated 2 weeks ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆449Updated last year
• alphasoc / flightsim
  A utility to safely generate malicious network traffic patterns and evaluate controls.
  ☆1,346Updated last year
• GACWR / OpenUBA
  A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by D…
  ☆462Updated last year
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,940Updated last month
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆285Updated last month
• InQuest / ThreatIngestor
  Extract and aggregate threat intelligence.
  ☆892Updated last year
• CriticalPathSecurity / Zeek-Intelligence-Feeds
  Zeek-Formatted Threat Intelligence Feeds
  ☆381Updated last week
• mitre-attack / attack-stix-data
  STIX data representing MITRE ATT&CK
  ☆496Updated last month
• TheHive-Project / Cortex
  Cortex: a Powerful Observable Analysis and Active Response Engine
  ☆1,524Updated 3 weeks ago
• OpenCTI-Platform / connectors
  OpenCTI Connectors
  ☆497Updated this week
• MISP / misp-galaxy
  Clusters and elements to attach to MISP events or attributes (like threat actors)
  ☆592Updated last week
• jasonish / docker-suricata
  A Suricata Docker image.
  ☆309Updated 3 weeks ago
• DinoTools / dionaea
  Home of the dionaea honeypot
  ☆783Updated last year
• cisco / joy
  A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
  ☆1,353Updated last year
• mitre-attack / bzar
  A set of Zeek scripts to detect ATT&CK techniques.
  ☆618Updated last year
• mushorg / snare
  Super Next generation Advanced Reactive honEypot
  ☆473Updated last year
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆495Updated last year
• Shuffle / Shuffle
  Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
  ☆2,120Updated this week
• mitre-attack / car
  Cyber Analytics Repository
  ☆968Updated 7 months ago
• mitre-attack / mitreattack-python
  A python module for working with ATT&CK
  ☆636Updated last week
• TonyPhipps / SIEM
  SIEM Tactics, Techiques, and Procedures
  ☆684Updated last week
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆180Updated 3 weeks ago
• MISP / PyMISP
  Python library using the MISP Rest API
  ☆476Updated last week