Alternatives and similar repositories for StoW

Users that are interested in StoW are comparing it to the libraries listed below

• socfortress / SOCFortress-Threat-Intel
  Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service
  ☆31Updated last year
• dariommr / scripts
  Personal scripts
  ☆15Updated last year
• weslambert / DinoSOARLab
  Security Onion + Automation + Response Lab including n8n and Velociraptor
  ☆112Updated 3 years ago
• theflakes / sigma_to_wazuh
  Convert Sigma rules to Wazuh rules
  ☆73Updated 2 months ago
• sametsazak / sysmon
  Sysmon and wazuh integration with Sigma sysmon rules [updated]
  ☆70Updated 4 years ago
• referefref / sinon
  Automation tool for Windows Deception Host Burn-In
  ☆86Updated 11 months ago
• cisagov / playbook-ng
  Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and evict…
  ☆152Updated last month
• infobloxopen / threat-intelligence
  ☆96Updated 3 weeks ago
• mdecrevoisier / Windows-auditing-baseline
  Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.
  ☆57Updated 5 months ago
• juaromu / wazuh
  ☆19Updated 4 years ago
• branchnetconsulting / wazuh-tools
  Useful scripts for those administering Wazuh
  ☆88Updated last week
• juaromu / wazuh-domain-stats-alienvault
  ☆17Updated 4 years ago
• juaromu / wazuh-opencti
  ☆39Updated 2 years ago
• SophosRapidResponse / OSQuery
  ☆88Updated 8 months ago
• CERN-CERT / pDNSSOC
  Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.
  ☆53Updated 3 weeks ago
• socfortress / wazuh-mcp-server
  Repo to hold wazuh manager mcp server
  ☆65Updated last month
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆132Updated last year
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆99Updated 3 months ago
• bruneaug / DShield-SIEM
  DShield Sensor Log Collection with ELK
  ☆43Updated this week
• CrowdStrike / VirtualGHOST
  VirtualGHOST Detection Tool
  ☆97Updated last year
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆70Updated last year
• elastic / detection-rules-explorer
  ☆21Updated this week
• CrowdStrike / MISP-tools
  Import CrowdStrike Threat Intelligence into your instance of MISP
  ☆48Updated 5 months ago
• mandiant / citrix-ioc-scanner-cve-2023-3519
  ☆67Updated 2 years ago
• mgreen27 / mcp-velociraptor
  VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.
  ☆58Updated 3 months ago
• joeavanzato / LogBoost
  Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…
  ☆108Updated last year
• juaromu / wazuh-misp
  ☆19Updated 2 years ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆99Updated 7 months ago
• dfir-dd / incident-response-playbooks
  Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
  ☆49Updated last year
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆140Updated 8 months ago