SIEM & Threat Detection OSS tools — 5 tracked with release & CVE alerts

Zircolite Healthy open source

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Splunk Security Content Healthy open source

Splunk Security Content

Zeek Healthy open source

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

wazuh Healthy open source

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Sigma Healthy open source

Main Sigma Rule Repository

Tools