All Projects → V1D1AN → S1EM

V1D1AN / S1EM

Licence: other
This project is a SIEM with SIRP and Threat Intel, all in one.

Programming Languages

YARA
70 projects

Projects that are alternatives of or similar to S1EM

Synesis lite suricata
Suricata IDS/IPS log analytics using the Elastic Stack.
Stars: ✭ 167 (-38.15%)
Mutual labels:  kibana, logstash, filebeat, suricata
seahorse
ELKFH - Elastic, Logstash, Kibana, Filebeat and Honeypot (HTTP, HTTPS, SSH, RDP, VNC, Redis, MySQL, MONGO, SMB, LDAP)
Stars: ✭ 31 (-88.52%)
Mutual labels:  kibana, logstash, filebeat
ELK-Hunting
Threat Hunting with ELK Workshop (InfoSecWorld 2017)
Stars: ✭ 58 (-78.52%)
Mutual labels:  kibana, logstash, filebeat
Dynamite Nsm
DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection
Stars: ✭ 92 (-65.93%)
Mutual labels:  kibana, logstash, suricata
training-materials
No description or website provided.
Stars: ✭ 47 (-82.59%)
Mutual labels:  malware, misp, thehive
docker-elk-stack
The ELK stack Docker containerization (Elasticsearch, Logstash and Kibana)
Stars: ✭ 20 (-92.59%)
Mutual labels:  kibana, logstash, filebeat
Elk
搭建ELK日志分析平台。
Stars: ✭ 688 (+154.81%)
Mutual labels:  kibana, logstash, filebeat
elk-stack
ELK Stack (Elasticsearch, Logstash & Kibana)
Stars: ✭ 13 (-95.19%)
Mutual labels:  kibana, logstash, filebeat
Elk Hole
elasticsearch, logstash and kibana configuration for pi-hole visualiziation
Stars: ✭ 136 (-49.63%)
Mutual labels:  kibana, logstash, filebeat
MegaDev
Bro IDS + ELK Stack to detect and block data exfiltration
Stars: ✭ 46 (-82.96%)
Mutual labels:  logstash, filebeat, zeek
ThePhish
ThePhish: an automated phishing email analysis tool
Stars: ✭ 676 (+150.37%)
Mutual labels:  malware, misp, thehive
static file analysis
Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules
Stars: ✭ 34 (-87.41%)
Mutual labels:  clamav, sigma, yara
Thehive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
Stars: ✭ 2,300 (+751.85%)
Mutual labels:  misp, thehive, cortex
tutorials
Tutorials
Stars: ✭ 80 (-70.37%)
Mutual labels:  kibana, logstash, filebeat
Vagrant Elastic Stack
Giving the Elastic Stack a try in Vagrant
Stars: ✭ 131 (-51.48%)
Mutual labels:  kibana, logstash, filebeat
Docker Elastic
Deploy Elastic stack in a Docker Swarm cluster. Ship application logs and metrics using beats & GELF plugin to Elasticsearch
Stars: ✭ 202 (-25.19%)
Mutual labels:  kibana, logstash, filebeat
generator-mitosis
A micro-service infrastructure generator based on Yeoman/Chatbot, Kubernetes/Docker Swarm, Traefik, Ansible, Jenkins, Spark, Hadoop, Kafka, etc.
Stars: ✭ 78 (-71.11%)
Mutual labels:  kibana, logstash, traefik
infrastructure
Flux based GitOps repository for my home lab infrastructure.
Stars: ✭ 14 (-94.81%)
Mutual labels:  traefik, homer
EnterpriseApplicationLog
Enterprise Application Log with RabbitMQ, LogStash, ElasticSearch and Kibana
Stars: ✭ 88 (-67.41%)
Mutual labels:  kibana, logstash
osint-combiner
Combining OSINT sources in Elastic Stack
Stars: ✭ 77 (-71.48%)
Mutual labels:  kibana, logstash

20210518_v1d1an_bg1--white

Objectives

Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable.

S1EM is a SIEM with SIRP and Threat Intel, a full packet capture, all in one.

Inside the solution:

  • Cluster Elasticsearch
  • Kibana
  • Filebeat
  • Logstash
  • Metricbeat
  • Heartbeat
  • Auditbeat
  • Fleet
  • N8n
  • Spiderfoot
  • Syslog-ng
  • Elastalert
  • TheHive
  • Cortex
  • MISP
  • OpenCTI
  • Arkime
  • Suricata
  • Zeek
  • StoQ
  • Mwdb
  • Traefik
  • Clamav
  • Codimd
  • Watchtower
  • Homer

S1EM

Guides

Roadmap

Related project

https://www.elastic.co
https://github.com/TheHive-Project/Docker-Templates
https://github.com/jasonish/docker-suricata
https://github.com/blacktop/docker-zeek
https://github.com/rskntroot/arkime
https://github.com/coolacid/docker-misp
https://github.com/m0ns7er/ElasticXDR
https://github.com/PUNCH-Cyber/stoq
https://github.com/jertel/elastalert-docker
https://github.com/OpenCTI-Platform/docker
https://github.com/CERT-Polska/mwdb-core
https://github.com/SigmaHQ/sigma
https://github.com/Yara-Rules/rules
https://traefik.io/
https://docs.linuxserver.io/images/docker-heimdall
https://github.com/cisagov/Malcolm
https://github.com/blueimp/jQuery-File-Upload
https://gchq.github.io/CyberChef/
https://www.clamav.net/
https://www.syslog-ng.com/
https://github.com/bastienwirtz/homer

Special thanks

En français cette fois.
Merci à mes amis et collègues qui m´ont inspiré toutes ces années, qui m´ont aidé, et corrigé des bugs. Je pense à Kidrek, Juju, mlp1515, Wagga40, Xophidia, StevenDias33, Frak113, HiPizzaa,et tous ceux qui n´ont pas forcement de compte github.
Merci à vous :)

Liens github:
https://github.com/kidrek
https://github.com/mlp1515
https://github.com/frack113
https://github.com/StevenDias33
https://github.com/wagga40
https://github.com/xophidia

Special thanks in english

Thanks to @Mcdave2k1 for your pull requests

Donate

If this project help you reduce time to develop, you can give me a cup of coffee :)

paypal

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].