An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
SQL powered operating system instrumentation, monitoring, and analytics.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Convenient & secure logging during development & release in Swift 4 & 5
- swift
- logging
- swiftybeaver-platform
- swift-framework
Sysmon configuration file template with default high-quality event tracing
- sysmon
- threatintel
- threat-hunting
- sysinternals
Investigate malicious Windows logon by visualizing and analyzing Windows event log
- security
- dfir
- javascript
- visualization
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
- security
- kinesis
- serverless
- terraform
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!
- dashboard
- domain-investment
- domain-management
- monitoring
fmtlog is a performant fmtlib-style logging library with latency in nanoseconds.
- high-performance
- logging-library
- logging
- fmtlib
Tenzir is the data pipeline engine for security teams.
- incident-response
- threathunting
- siem
- soc
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
- security
- netsec
- suricata
- ids
MoniGo is a performance monitoring library for Go apps, offering real-time insights into service-level and function-level metrics. With an intuitive UI, it enables developers to track and optimize performance. Get your Go app's dashboard up in just 10 seconds!
- analytics
- dashboard
- golang
- insights
Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
Performances & exceptions monitoring for Ruby on Rails applications
- ruby
- monitoring
- error-monitoring
- performance-monitoring
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
Apache Logfile Security Analyzer
CLI utility and Python module for analyzing log files and other data.
- log-analysis
- log-parser
- cli
- security
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game
fast, extensible, versatile event router for Suricata's EVE-JSON format
- suricata
- eve
- json
- golang
Tom's Honey Pot as seen in Applied Network Security Monitoring.