Alternatives and similar repositories for elastic-agent-android

Users that are interested in elastic-agent-android are comparing it to the libraries listed below

• threathunters-io / laurel
  Transform Linux Audit logs for SIEM usage
  ☆774Updated 2 weeks ago
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆471Updated 2 weeks ago
• OpenCTI-Platform / connectors
  OpenCTI Connectors
  ☆450Updated last week
• splunk / splunk-add-on-microsoft-azure
  Splunk Add-on for Microsoft Azure
  ☆11Updated 6 months ago
• CiscoSecurity / amp-01-basics
  Scripts that cover the basics of interacting with the AMP for Endpoints API
  ☆17Updated 6 years ago
• Cargill / OpenSIEM-Logstash-Parsing
  SIEM Logstash parsing for more than hundred technologies
  ☆185Updated last week
• splunk / attack_data
  A repository of curated datasets from various attacks
  ☆662Updated last week
• philhagen / sof-elk
  Configuration files for the SOF-ELK VM
  ☆1,605Updated 2 weeks ago
• splunk / contentctl
  Splunk Content Control Tool
  ☆114Updated this week
• MISP / misp-docker
  A production ready Dockered MISP
  ☆255Updated last week
• cyb3rfox / Aurora-Incident-Response
  Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
  ☆924Updated last year
• dfir-iris / iris-web
  Collaborative Incident Response platform
  ☆1,214Updated this week
• 3CORESec / testmynids.org
  A website and framework for testing NIDS detection
  ☆269Updated this week
• CrowdStrike / logscale-community-content
  This repository contains Community and Field contributed content for LogScale
  ☆249Updated last week
• CriticalPathSecurity / Zeek-Intelligence-Feeds
  Zeek-Formatted Threat Intelligence Feeds
  ☆374Updated this week
• elastic / security-action-examples
  This repository contains a few examples of actions that can be added to rules within Elastic Security.
  ☆22Updated 5 months ago
• socfortress / Wazuh-Rules
  Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!
  ☆802Updated last week
• splunk / rba
  RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…
  ☆56Updated last week
• center-for-threat-informed-defense / tram
  TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE AT…
  ☆506Updated 2 months ago
• jewnix / splunk-spec-files
  Splunk spec files version history
  ☆35Updated 3 weeks ago
• cmu-sei / GHOSTS
  GHOSTS is a realistic user simulation framework for cyber experimentation, simulation, training, and exercise
  ☆584Updated last week
• mdecrevoisier / SIGMA-detection-rules
  Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques
  ☆372Updated 6 months ago
• cisagov / LME
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-t…
  ☆1,064Updated last week
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆932Updated last week
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆416Updated last week
• atc-project / atc-react
  A knowledge base of actionable Incident Response techniques
  ☆643Updated 3 years ago
• TonyPhipps / SIEM
  SIEM Tactics, Techiques, and Procedures
  ☆645Updated this week
• center-for-threat-informed-defense / attack-flow
  Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by devel…
  ☆664Updated last week
• wagga40 / Zircolite
  A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
  ☆723Updated 3 months ago
• mitre-attack / attack-stix-data
  STIX data representing MITRE ATT&CK
  ☆427Updated 2 months ago