Siem Integration
Showing 9 of 9 projects
An interactive GNU/Linux application firewall that monitors and controls outbound network connections.
An open-source platform for collecting, storing, sharing, and acting upon cybersecurity threat intelligence and indicators.
A modular repository of Sysmon configuration modules for customizable endpoint detection and logging.
A collection of Windows Event Forwarding configurations and subscriptions for centralized security event collection and incident detection.
A PowerShell script for live forensic data acquisition and endpoint lockdown during Windows incident response.
A high-performance passive DNS monitoring framework that captures, indexes, and analyzes DNS traffic for security and network insights.
A simple and effective honeypot that mimics phpMyAdmin to detect and log unauthorized access attempts.
A Suricata plugin that outputs Eve JSON events to Apache Kafka for real-time network security monitoring.
A collection of open-source threat detection rules for Snort, Sigma, and Yara security tools.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.