Resources
sigma
SigmaHQ/sigma
The main Sigma rule repository, offering thousands of vendor-agnostic detection rules convertible to many SIEM query languages.
Topics
Related projects
RedELK2.7kA SIEM built for red teams that centralizes and enriches operational logs from multiple teamservers and redirector traffic logs for long-running operations and blue-team detection.
graylog2-server8.2kA free and open-source log management platform for centralizing, indexing, and analyzing logs with search, alerting, and SIEM capabilities.
Clear-NDR-ISO1.6kA Suricata based NDR distribution
grafana77.8kAn open-source observability platform for visualizing metrics, logs, and traces.
osquery23.8kA SQL-powered operating system instrumentation framework that exposes processes, network connections, and other host state as queryable tables for security monitoring.
suricata6.8kSuricata is an open-source network IDS, IPS, and security monitoring engine developed by the OISF, designed for high-performance analysis of live network traffic.