securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
AI summary
Security Monitor
An integrated security monitoring and threat hunting platform that collects, analyzes, and responds to network traffic data
- stars
- 3.3K
- forks
- 515
- watching
- 88
Similar projects
Found by comparing what the projects do, not just their names.
Documentation
A collection of Python-based documentation for security-related software solutions.
s-rah/onionscan2.9K
Risk scanner
A tool designed to help users of hidden services identify operational security issues and track Dark Web sites
misp/misp5.4K
CTI platform
A platform for collecting, storing, and sharing structured information about cyber security incidents and threats.
opennhp/opennhp13.5K
Network Hider
A Zero Trust protocol that leverages resource-hiding and encryption to safeguard servers and data from attackers
Security hub
Delivers threat intelligence and detection capabilities to Splunk Enterprise Security
Web Firewall
A next-generation web application firewall that integrates with various environments to provide out-of-the-box security for web services.
File sharing tool
Anonymously shares files, hosts websites, and chats using the Tor network
Threat Hunter
Automated platform for discovering and analyzing cybersecurity threats targeting an organization
Security auditor
A plugin for static analysis of Java web applications and Android applications to identify potential security vulnerabilities.
Tor browser
A web browser that encrypts and tunnels internet traffic through the Tor network.
cilium/tetragon3.7K
Security monitor
A real-time security monitoring system that detects and responds to sensitive events using eBPF-based sensors and enriched with kernel and Kubernetes metadata
Network Security Monitor
An integrated security monitoring platform using Suricata and Elasticsearch to analyze network traffic and alerts
Malware analyzer
A tool for analyzing malware and threat intelligence data from multiple sources
Threat detection queries
Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs
Incident manager
A scalable platform for investigating and managing security incidents, providing features for collaboration, task assignment, and case management.
