siem · GitHub Topics

Wazuh - 开源安全平台

安全 compliance Logging vulnerability-detection Cybersecurity file-integrity-monitoring malware-detection cloud-security container-security security-automation siem xdr configuration-assessement incident-response pci-dss security-hardening wazuh

C 12.67 k

1 天前

SigmaHQ / sigma

Main Sigma Rule Repository

安全监控 siem Logging signatures elasticsearch splunk ids sysmon

Python 9.3 k

1 天前

Graylog2 / graylog2-server

Free and open log management

Logging log-collector log-viewer logging-server siem secure-logging 安全 gelf syslog graylog kafka amqp log-management Hacktoberfest

Java 7.7 k

2 天前

outflanknl / RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

安全 siem 监控 elastic elasticsearch logstash kibana red-teaming

Python 2.47 k

5 个月前

mozilla / MozDef

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

siem Python elk elk-stack elasticsearch 安全 unmaintained

Python 2.17 k

4 年前

mikeroyal / Digital-Forensics-Guide

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Python 1.92 k

1 年前

sherifabdlnaby / elastdocker

🐳 Elastic Stack (ELK) v8+ on Docker with Compose. Pre-configured out of the box to enable Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command.

elk elk-stack elasticstack Docker Docker Compose docker-compos-template elasticsearch siem observability kibana logstash

Dockerfile 1.88 k

5 个月前

matanolabs / matano

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Amazon Web Services cloud 安全 big-data Serverless apache-iceberg log-analytics log-management threat-hunting Rust alerting cloud-native aws-security cloud-security Cybersecurity secops dfir detection-engineering siem

Rust 1.57 k

5 个月前

cyb3rxp / awesome-soc

A collection of sources of documentation, as well as field best practices, to build/run a SOC

cert detection soc siem soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp

1.42 k

25 天前

pfelk / pfelk

pfSense/OPNsense + Elastic Stack

pfsense elasticsearch elastic siem firewall logs Docker

Shell 1.14 k

5 个月前

netevert / sentinel-attack

Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK

siem threat-hunting mitre-attack sysmon Azure blue-team Cybersecurity Logging 安全 detection kql

HCL 1.07 k

7 个月前

mthcht / awesome-lists

#Awesome#Awesome Security lists for SOC/CERT/CTI

blueteam hacktools redteam 安全 soc Awesome Lists cti IoC (Disambiguation)blueteam-tools detection detection-engineering dfir incident-response iocs siem threat-hunting threat-intelligence ransomware rmm

YARA 995

1 天前

mikeroyal / Open-Source-Security-Guide

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.