Alternatives and similar repositories for sf-collector

Users that are interested in sf-collector are comparing it to the libraries listed below

• sysflow-telemetry / sf-processor
  SysFlow edge processing pipeline
  ☆17Updated 10 months ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆31Updated last year
• Ascend-Technologies / OpenCTI-HELM-CHART
  ☆15Updated 2 years ago
• runreveal / sigmalite
  ☆51Updated 2 months ago
• cyentific-rni / security-playbook-stix-misp-exchange
  This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…
  ☆16Updated 3 years ago
• opencybersecurityalliance / firepit
  Firepit - STIX Columnar Storage
  ☆17Updated last year
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆111Updated 5 months ago
• cyentific-rni / stix2.1-coa-playbook-extension
  A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…
  ☆23Updated last year
• salesforce / multithreaded-exfil-detection
  A simple way of detecting multithreaded exfiltration in Zeek.
  ☆14Updated 7 months ago
• mnemonic-no / provreq
  Adversary Emulation Planner
  ☆42Updated last year
• corelight / got_zoom
  A Zeek package that detects Zoom logins and meeting joins
  ☆12Updated 5 years ago
• sebdraven / IOCmite
  Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
  ☆36Updated 3 years ago
• sysflow-telemetry / sysflow
  SysFlow documentation and issues tracker
  ☆46Updated last year
• oasis-open / cti-stix-generator
  OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/c…
  ☆42Updated last year
• opencybersecurityalliance / oca-iob
  Augmentation to Machine Readable CTI
  ☆37Updated 2 months ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆89Updated last week
• mitre / stockpile
  A CALDERA plugin
  ☆79Updated last month
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆189Updated last year
• opencybersecurityalliance / kestrel-huntbook
  This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)
  ☆36Updated last year
• zeek / zeek-agent
  This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2
  ☆123Updated 5 years ago
• satta / gommunityid
  Go implementation of the Community ID flow hashing standard
  ☆21Updated 7 months ago
• opencybersecurityalliance / documentation
  OCA-wide documentation shared by all sub-projects and repositories
  ☆33Updated last year
• chronicle / api-samples-python
  Python samples and utilities for Chronicle APIs
  ☆87Updated 3 weeks ago
• tenzir / dockerized-zeek
  Dockerized Zeek
  ☆11Updated last year
• micrictor / spl-spt
  Zeek plugin to generate data on per-packet sizes and intervals
  ☆14Updated 5 years ago
• grapl-security / grapl-analyzers
  Hosted analyzers built for Grapl
  ☆14Updated 2 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 5 years ago
• certeu / morio
  Connect - Stream - Observe - Respond | Morio provides the plumbing for your observability needs
  ☆28Updated this week
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆27Updated 5 years ago
• theparanoids / rdfp
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆40Updated 2 years ago