xeraa / auditbeat-in-actionLinks
Demo for Elastic's Auditbeat and SIEM
☆24Updated 4 years ago
Alternatives and similar repositories for auditbeat-in-action
Users that are interested in auditbeat-in-action are comparing it to the libraries listed below
Sorting:
- Expandable Defensive Cyber Operations Platform☆43Updated 3 years ago
- SIAC is an enterprise SIEM built on open-source technology.☆115Updated 7 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆54Updated last week
- Docker files for Security Onion☆42Updated 5 years ago
- server for indexing and querying passive DNS observations☆49Updated 3 weeks ago
- Kibana 4 Templates for Suricata IDPS☆33Updated 9 years ago
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Updated 6 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆57Updated 2 months ago
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆108Updated last year
- Flame - Send vulnerabilities reports to SIEM☆15Updated 9 years ago
- Full Packet Capture for the Masses☆14Updated 7 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆17Updated 4 years ago
- S4A main repository. SaltStack states, install script and build scripts☆27Updated 2 weeks ago
- ☆12Updated 5 years ago
- Zeek package for tracking long connections to report them before they have completed.☆31Updated 2 months ago
- D4 core software (server and sample sensor client)☆42Updated 2 years ago
- A repository for OSSEC rules and decoders☆55Updated 2 years ago
- setup zeek, previously Bro IDS☆18Updated last week
- A lightweight tool to score network traffic and flag anomalies☆123Updated last year
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Updated 5 years ago
- ☆11Updated 7 years ago
- Offensive Infrastructure with Modern Technologies☆91Updated 5 years ago
- Manages continuous scans of your infrastructure☆107Updated 4 years ago
- Vuls Beater for Elasticsearch - connecting vuls☆17Updated 5 years ago
- threat-intelligence.eu website and repository of information about open standards, documents, methodologies and processes in threat intel…☆49Updated 2 months ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 5 years ago
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆16Updated 4 years ago
- Potiron - Normalize, Index and Visualize Network Capture☆88Updated 6 years ago
- Wazuh - Splunk App☆56Updated last year
- A library and a tool for converting audit logs to XML and JSON☆46Updated 8 years ago