security-monitoring

There are 6 repositories under security-monitoring topic.

StamusNetworks / SELKS
A Suricata based IDS/IPS/NSM distro
suricata network security monitoring management ids ips linux distribution security-monitoring threat-hunting network-intrusion-detection network-security gui user-interface
Language:Shell 1417
ElectricEye
jonrau1 / ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops aws-audit aws-compliance compliance attack-surface-management aws gcp-security multicloud saas-security google-cloud-security asset-management
Language:Python 924
kunai-project / kunai
Threat-hunting tool for Linux
ebpf linux security-monitoring threat-hunting threat-detection
Language:Rust 350
droe / xnumon
monitor macOS for malicious activity
macos security process-monitoring security-monitoring endpoint-security agent
Language:C 230
NVISOsecurity / ee-outliers
Open-source framework to detect outliers in Elasticsearch events
outliers netsec threat-hunting statistics security-monitoring anomaly-detection outlier-detection siem cirt security-operations ee-outliers ml machine-learning statistical-analysis
Language:Python 203
MegaManSec / LDAP-Monitoring-Watchdog
LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications, and deletions for administrators and security researchers.
audit ldap ldap-monitoring monitoring monitoring-tool openldap security-monitoring
Language:Python 166
k8scop / k8s-security-dashboard
A security monitoring solution for Kubernetes
kubernetes security-monitoring security-tools
Language:Python 131
ccdcoe / CDMCS
Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
moloch suricata monitoring nsm network-monitoring packet-capture-and-analysis arkime classroom observability packet-capture security-monitoring training
Language:Jupyter Notebook 99
Karneades / Defensomania
Defensomania is a security monitoring and incident response card game.
incident-response self-assessment incident-response-readiness educational-game security-monitoring card-game card-games
Language:Ruby 58
D4-project / sensor-d4-tls-fingerprinting
Extract TLS certificates from pcap files or network interfaces, fingerprint TLS client/server interactions with ja3/ja3s
d4-project pcap security-monitoring tls tls-certificate
Language:Go 38
D4-project / analyzer-d4-passivedns
A Passive DNS backend and collector
passive-dns passive-dns-collection d4-project security-monitoring network-monitoring network-security dns
Language:Python 31
Truvis / Splunk_TA_Truvis_Suricata5
This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server
splunk splunk-application splunk-addon splunk-security siem suricata security security-dashboard security-monitoring security-alerts network-security network-security-monitoring splunk-alerts splunk-http splunk-enterprise splunk-searches splunk-universal-forwarder splunk-hec splunk-impact-cloud splunk-sdk
15
fabriziofiorucci / NGINX-NMS-Docker
This repository creates a docker image for NGINX Instance Manager to run it on Kubernetes, Openshift and docker-compose. Optional integration with Second Sight.
nginx kubernetes nginx-instance-manager security-monitoring
Language:Shell 9
kookmin-sw / capstone-2021-18
O24Sec (Object-Oriented Clustering for Security Monitoring)
security-monitoring
Language:Python 9
cookpad / minerva
Serverless Log Search Architecture for Security Monitoring based on Amazon Athena
amazon-athena security-monitoring cloudformation golang search-engine
Language:Go 8
m-mizutani / practical-security-monitoring
入門セキュリティ監視
security-monitoring document japanese
8
Get-SysmonLogs
0daysimpson / Get-SysmonLogs
A PowerShell client for retrieving and searching Sysmon logs
dfir security-monitoring sysmon powershell
Language:PowerShell 6
hardenedlinux / debian-nix-manager
Using nix(DevOps) to deploy Network Security Monitoring System on Debian
nix elk security-monitoring kafka zeek osquery intelligence-analysis dfir
Language:Nix 6
cdpxe / OpenBSDhacks
Some of my security-related coding projects for OpenBSD: A kernel-based user-profile intrusion detection system (FUPIDS) and an ICMP-based "port-knocking" service (openportd).
openbsd security ids port-knocking bsd kernel fupids portknocking hids openbsd-ports openbsd-community openbsd-scripts icmp security-monitoring security-tools security-hardening information-security host-monitoring kernel-module kernel-modules
Language:HTML 4
louisbarrett / Eager-Locomotive
Firehose ElasticSearch Kibana Stack for Security Monitoring
security-monitoring terraform dfir cloud aws
Language:HCL 4
alhazred / illumos-fim
IFIM is an illumos fork of Achiefs File Integrity Monitoring tool that performs file system analysis, file integrity checking on illumos-based distributions.
file-integrity rust events file file-integrity-monitoring file-monitoring illumos security-monitoring solaris
Language:Rust 2
MaheshShukla1 / Python-SOC-Security-notes
PythonSOCModules: Elevate your Security Operations Center (SOC) with Python's Paramiko, Requests, PyShark, Scapy, Matplotlib, and Seaborn modules. Strengthen security monitoring, incident detection, and response.
cybersecurity python python-modules python3 security-monitoring security-operations-center
2
secnnet / SplunkQueryAutomation.py
data-analytics it-operations log-analysis python-automation python-sdk security-monitoring splunk splunk-automation splunk-sdk xml-parsing splunk-search-queries
Language:Python 2
vxcontrol / vxagent
VXMonitor agent
golang agent control-systems distributed-systems cross-platform monitoring-agent lua security-monitoring desktop-application realtime-monitoring
Language:Go 2
iosifache / wazuh-manager-filebeat
Docker image and Helm chart for Wazuh Manager and Filebeat, configurable for sending alerts to a specific OpenSearch instance 🐺
wazuh-manager opensearch security-monitoring
Language:Dockerfile 1
psjs97 / Security-Advisories-Recopilation
Security Advisories Repository
cybersecurity data-protection it-security patch-management patching risk-management security security-advisories security-monitoring security-updates software threat-intelligence vulnerabilities vulnerability-management community-collaboration
1
jimmyhcao / SplunkSIEM
Splunk project demonstration
demo demonstration demonstration-project security-monitoring security-tools siem splunk dashboard security-information
srozb / certstream
Unofficial certstream library written in Nim.
certificate-transparency phishing-detection security-monitoring
Language:Nim

security-monitoring

StamusNetworks / SELKS

jonrau1 / ElectricEye

kunai-project / kunai

droe / xnumon

NVISOsecurity / ee-outliers

MegaManSec / LDAP-Monitoring-Watchdog

k8scop / k8s-security-dashboard

ccdcoe / CDMCS

Karneades / Defensomania

D4-project / sensor-d4-tls-fingerprinting

D4-project / analyzer-d4-passivedns

Truvis / Splunk_TA_Truvis_Suricata5

fabriziofiorucci / NGINX-NMS-Docker

kookmin-sw / capstone-2021-18

cookpad / minerva

m-mizutani / practical-security-monitoring

0daysimpson / Get-SysmonLogs

hardenedlinux / debian-nix-manager

cdpxe / OpenBSDhacks

louisbarrett / Eager-Locomotive

alhazred / illumos-fim

MaheshShukla1 / Python-SOC-Security-notes

secnnet / SplunkQueryAutomation.py

vxcontrol / vxagent

iosifache / wazuh-manager-filebeat

psjs97 / Security-Advisories-Recopilation

jimmyhcao / SplunkSIEM

srozb / certstream