Free and open source log management
-
Updated
Jan 31, 2023 - Java
Free and open source log management
Main Rule Repository
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
Nzyme is a free and open next-generation WiFi defense system. Go to www.nzyme.org for more information.
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
pfSense/OPNsense + Elastic Stack
A collective list of public APIs for use in security. Contributions welcome
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
Set of EVTX samples (>270) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.
A little tool to play with Azure Identity - Azure Active Directory lab creation tool
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
Encyclopedia for Executables
Add a description, image, and links to the siem topic page so that developers can more easily learn about it.
To associate your repository with the siem topic, visit your repo's landing page and select "manage topics."