cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

tenzir / tenzir

Tenzir is the data pipeline engine for security teams.

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.

sroberts / awesome-iocs

Curated sources of indicators of compromise, detection signatures and IOC tools.

secureworks / dalton

Suricata, Snort and Zeek IDS rule and pcap testing system

jasonish / evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

OISF / suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.