OSSIM
OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.
- from
- Security, Cybersecurity Blue Team
- added
- 2026-10-10
- likes
- 0
similar
-
OpenSOC github.com
OpenSOC integrates a variety of open source big data technologies in order to offer a centralized tool for security monitoring and analysis.
-
Security Onion blog.securityonion.net
Security Onion is a Linux distro for intrusion detection, network security monitoring, and log management. It's based on Ubuntu and contains Snort, Suricata, Zeek, OSSEC, Sguil, Squert, Snorby, ELSA, Xplico, NetworkMiner, and many other security tools. The easy-to-use Setup…
-
Open Source HIDS SECurity (OSSEC) ossec.net
-
Open Cybersecurity Schema Framework (OCSF) schema.ocsf.io
An opensource security data source and event schema.
-
Security Onion github.com
Special Linux distro aimed at network security monitoring featuring advanced analysis tools.
-
SOCLabs soc-labs.top
A lab for blue teamers and detection engineers, with real threat data and support for popular SIEM query languages, enabling hands-on learning and practice in detection rule writing and threat hunting.
Security › Network > Security Information & Event Management: “OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.”
Cybersecurity Blue Team › Security monitoring > Security Information and Event Management (SIEM): “Single-server open source SIEM platform featuring asset discovery, asset inventorying, behavioral monitoring, and event correlation, driven by AlienVault Open Threat Exchange (OTX).”