SIEM & Threat Detection OSS tools — 9 tracked with release & CVE alerts

Splunk Security Content Healthy open source

Splunk Security Content

Zeek Healthy open source

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Maltrail Healthy open source

Malicious traffic detection system

Hayabusa Healthy open source

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Intel Owl Healthy open source

IntelOwl: manage your Threat Intelligence at scale

Sigma Healthy open source

Main Sigma Rule Repository

wazuh Healthy open source

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Zircolite Healthy open source

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

crowdsec Healthy open source 1 tracking

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

Tools