siem

log-analysis log-collector log-viewer logging logging-server siem secure-logging security gelf syslog graylog kafka amqp log-management

siem python elk elk-stack elasticsearch security

security monitoring siem logging signatures elasticsearch splunk ids sysmon

security siem monitoring elastic elasticsearch logstash kibana red-teaming

wifi security infosec siem graylog

windows event-log siem

awesome-list security siem json-api

security ids ips siem log syslog nsm log-monitoring

threat hunt red blue purple team incident response baseline monitor analysis scan log forensics triage recon threat-hunting security soc siem

mitre-attack mitre-attack-db mitre blueteam blueteaming detection sigma threat threat-model atomicredteam soc cybersecurity threathunting incidentresponse dfir threatintelligence cti siem detection-rule threat-detection

blueteam dfir mitre-attack sysmon siem redteam powershell

network-forensics incident-response caf actor-model bitmap-index dfir threathunting siem soc

outliers netsec threat-hunting statistics security-monitoring anomaly-detection outlier-detection siem cirt security-operations

siem malware ansible splunk elk cuckoo use-case security

dfir mitre-attack threat-hunting threat-detection siem

splunk threat-hunting use-case siem rules

siem security elk osquery intrusion-detection secdevops pci-dss fim compliance wazuh incident-response aws

cybersecurity siem malware threatintel security

siem stix taxii sigma

siem risk-management risk-assessment vulnerability-management security security-tools secops security-audit web-application asset-management log-management log-analysis log-collector log forensics security-analysis security-awareness syslog log-parser log-monitoring

audit-event subscription event domain-controller event-forwarding wec wef siem

threat hunt red blue purple team incident response baseline monitor analysis scan log forensics triage recon threat-hunting security soc siem

etl kafka logs elasticsearch logstash cmdb siem java

siem osint django hackers infosec threat-intelligence incident-reports

windows eventlog forwarder logging dotnet logs defense logging-agent log-forwarder hunting cybersecurity siem commandline powershell detection windowsevents analytics analysis evtx logging-framework

qradar ansible blueteam siem

logging siem ansible splunk splunk-enterprise

log syslog log-analysis log-analytics forensics security security-tools log-management log-monitoring log-collector log-analyzer siem security-analysis security-awareness parser parsing command-line cli secops

aws aws-lambda cloud cloudsecurity aws-security aws-guardduty soar incident-response cybersecurity threatintel siem blueteam

rancher ansible kafka elasticsearch kibana logstash elk-stack docker kubernetes cattle logmanagement itoa siem zookeeper grafana prometheus