BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.
-
Updated
Apr 12, 2020
#
security-onion
Here are 56 public repositories matching this topic...
Code, labs and supporting materials for the book Industrial Cybersecurity, 2nd Edition
elasticsearch book lab cybersecurity threat-hunting ics scada ot security-onion wazuh industrial-control-systems
-
Updated
Sep 12, 2026 - Python
This project aims to enhance intrusion detection using Security Onion by integrating machine learning models for improved alert prioritization.
python security data-science machine-learning jupyter-notebook cybersecurity network-security intrusion-detection-system security-onion
-
Updated
Sep 25, 2024 - Jupyter Notebook
Collection of PatternDB files to parse Ubiquiti Unifi events into Security Onion's Syslog-NG and ELSA
-
Updated
Apr 24, 2017
Evidence-backed SOC L1 portfolio: 100 detection and investigation scenarios across 16 MITRE ATT&CK categories — including false-positive triage, proactive threat hunting, and insider-threat analysis. From a segmented enterprise lab, entirely open-source.
incident-response active-directory dfir cybersecurity threat-hunting siem soc security-onion wazuh blue-team mitre-attack detection-engineering
-
Updated
Oct 10, 2026 - PowerShell
Elasticsearch ingest pipeline for ASUS ROG router syslog in Security Onion 3.1
-
Updated
Jul 20, 2026 - Python
Self-hosted LLM triage for Security Onion alerts
-
Updated
Nov 2, 2026 - Python
Test your IDS with a simple python2.7 SCAPY tool.
-
Updated
Apr 20, 2018 - Python
YARA signature | YARA rule for Detecting Voldemort Malware
splunk malware threat-hunting cuckoo yara security-onion soar edr voldemort yara-rule voldemort-malware
-
Updated
Sep 9, 2024 - YARA
AstoraSOC is an open-source SOC and Incident Response platform for SIEM alert triage, case management, IOC intelligence, asset correlation, containment workflows, and professional reports
ioc splunk incident-response dfir cybersecurity siem case-management soc threat-intelligence security-onion wazuh soar qradar security-operations microsoft-sentinel elastic-security open-source-soc
-
Updated
Jul 18, 2026 - Python
Standalone Security Onion Setup + Network Simulation using Two Devices
-
Updated
Jul 6, 2024
Security Operations Center: pfSense firewall, Security Onion IDS/IPS, Splunk SIEM, Wazuh EDR and Microsoft Defender for Endpoint — multi-layered threat monitoring, detection and incident response
splunk incident-response cybersecurity siem pfsense soc network-security security-onion wazuh security-lab security-operations-center
-
Updated
Jan 12, 2026
🛡️ A complete 100% free roadmap to become a SOC Analyst or Blue Team professional, featuring Linux, Networking, SIEM, Threat Hunting, Incident Response, hands-on labs, home lab projects, and curated learning resources.
windows linux roadmap splunk incident-response dfir cybersecurity threat-hunting siem digital-forensics soc network-security security-onion wazuh learning-resources blue-team tryhackme cyberdefenders soc-analyst letsdefend
-
Updated
Jul 21, 2026
A Security Onion deployment project for intrusion detection and log analysis. Includes standalone, pfSense, internal, and cloud scenarios with Suricata, Zeek, Wazuh, and ELK stack integration.
-
Updated
Aug 12, 2025
Automated Security Onion alert forwarding to Telegram using the Telegram Bot API, with buffered alert delivery for SOC monitoring.
incident-response cybersecurity elastalert soc telegrambot security-onion wazuh threat-detection soc-automation security-alerting
-
Updated
Sep 24, 2026 - Python
Security Onion Packet Capture Download scripts
-
Updated
Nov 10, 2019 - Python
Presenting a guide and systematic methodology for implementing securityonion / ELK elastic search stack. Checklists, Samples, Tips, and Tricks
-
Updated
Dec 29, 2020
SOC/Blue Team lab investigating repeated failed Windows authentication attempts using Security Onion, Windows Event Logs, NTLM telemetry, and MITRE ATT&CK.
authentication incident-response cybersecurity threat-hunting soc security-onion blue-team threat-detection windows-security password-guessing netexec failed-logins
-
Updated
Sep 19, 2026
Security Onion
-
Updated
Apr 10, 2026 - Shell
Add this topic to your repo
To associate your repository with the security-onion topic, visit your repo's landing page and select "manage topics."