Alternatives and similar repositories for sysflow

Users that are interested in sysflow are comparing it to the libraries listed below

• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆79Updated 3 months ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆109Updated 3 months ago
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated last year
• Gui774ume / network-security-probe
  A process level network security monitoring and enforcement project for Kubernetes, using eBPF
  ☆44Updated 5 years ago
• falcosecurity / rules
  Falco rule repository
  ☆136Updated this week
• rad-security / fingerprints
  A repository to store Rad Fingerprinting data.
  ☆24Updated last year
• ossec / ossec-rules
  A repository for OSSEC rules and decoders
  ☆55Updated 2 years ago
• falcosecurity / driverkit
  Kit for building Falco drivers: kernel modules or eBPF probes
  ☆67Updated this week
• joshbressers / cve-analysis
  Tools for conducting analysis of CVE data in Elasticsearch
  ☆75Updated 2 months ago
• Gui774ume / krie
  Linux Kernel Runtime Integrity with eBPF
  ☆183Updated last year
• falcosecurity / event-generator
  Generate a variety of suspect actions that are detected by Falco rulesets
  ☆108Updated 4 months ago
• sttor / awesome-osquery
  Osquery Resources
  ☆62Updated 6 years ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆86Updated 3 weeks ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆135Updated last year
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆116Updated last week
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆88Updated 5 months ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆95Updated 3 years ago
• elastic / ebpf
  Elastic's eBPF
  ☆69Updated last week
• wiz-sec-public / peach-framework
  PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…
  ☆72Updated 2 years ago
• zeek / zeek-agent
  This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2
  ☆123Updated 4 years ago
• k8s-sec / k8s-sec.github.io
  Links and resources for the O'Reilly Kubernetes Security book
  ☆99Updated 4 years ago
• falcosecurity / pdig
  ptrace-based event producer for udig
  ☆67Updated 3 years ago
• vulsio / go-cpe-dictionary
  Build a local copy of CPE(Common Platform Enumeration)
  ☆106Updated last week
• linux-lock / bpflock
  bpflock - eBPF driven security for locking and auditing Linux machines
  ☆150Updated 3 years ago
• ancat / egrets
  egrets monitors egress
  ☆46Updated 5 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated 3 weeks ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆105Updated 6 years ago
• AbGuthrie / goquery
  Provide a shell like interface by utilizing osquery's distributed API
  ☆81Updated 5 years ago
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆184Updated last year
• danielsagi / kube-dnsspoof
  A POC for DNS spoofing in kubernetes clusters. Runs with minimum capabilities, on default installations of kuberentes.
  ☆78Updated 6 years ago