Tools
RedELK
outflanknl/RedELK
A SIEM built for red teams that centralizes and enriches operational logs from multiple teamservers and redirector traffic logs for long-running operations and blue-team detection.
Topics
Related projects
sigma11.5kThe main Sigma rule repository, offering thousands of vendor-agnostic detection rules convertible to many SIEM query languages.
grafana77.8kAn open-source observability platform for visualizing metrics, logs, and traces.
osquery23.8kA SQL-powered operating system instrumentation framework that exposes processes, network connections, and other host state as queryable tables for security monitoring.
graylog2-server8.2kA free and open-source log management platform for centralizing, indexing, and analyzing logs with search, alerting, and SIEM capabilities.
securityonion5kSecurity Onion is a free, open Linux distribution for threat hunting, enterprise security monitoring and log management. It bundles Suricata, Zeek, Elastic Stack, osquery and a unified console for network and host visibility.
netcap1.8kA network traffic analysis framework that converts packets into structured audit records, with protocol decoders, a web UI, detection rules and distributed capture.