An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
Repository Index
47,133 repositories indexed
1–24 of 29 · Most stars
SQL powered operating system instrumentation, monitoring, and analytics.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Tool for shell commands execution, visualization and alerting. Configured with a simple YAML file.
Spug is a lightweight agent-free automatic operation and maintenance platform designed for small and medium-sized enterprises. It integrates host management, host batch execution, host online terminal, file management, application release and deployment, pipelines, online task planning, configuration center, monitoring, alarm and so on.
- ops
- operations
- devops
- webssh
Convenient & secure logging during development & release in Swift 4 & 5
- swift
- logging
- swiftybeaver-platform
- swift-framework
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
Leveled execution logs for Go
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
- security
- kinesis
- serverless
- terraform
An extensible framework to audit executing operations in .NET
- audit-log
- audit
- entity-framework
- wcf
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!
- dashboard
- domain-investment
- domain-management
- monitoring
Tenzir is the data pipeline engine for security teams.
- incident-response
- threathunting
- siem
- soc
jHiccup is a non-intrusive instrumentation tool that logs and records platform "hiccups" - including the JVM stalls that often happen when Java applications are executed and/or any OS or hardware platform noise that may cause the running application to not be continuously runnable.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
- security
- netsec
- suricata
- ids
Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Apache Logfile Security Analyzer
CLI utility and Python module for analyzing log files and other data.
- log-analysis
- log-parser
- cli
- security
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game