jasonish/evebox

Web interface to explore Suricata EVE outputs

A web interface for interacting with your Bro IDS logs.

A simple WebUI with latest events from Falco

Security Analytics enables users for detecting security threats on their security event log data. It will also allow them to modify/tailor the pre-packaged solution.

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Blue team analyisis box is a tool for blue team security analyisis.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity