Elasticsearch ingest pipeline for ASUS ROG router syslog in Security Onion 3.1
-
Updated
Jul 20, 2026 - Python
#
security-onion
Here are 8 public repositories matching this topic...
Test your IDS with a simple python2.7 SCAPY tool.
-
Updated
Apr 20, 2018 - Python
AstoraSOC is an open-source SOC and Incident Response platform for SIEM alert triage, case management, IOC intelligence, asset correlation, containment workflows, and professional reports
ioc splunk incident-response dfir cybersecurity siem case-management soc threat-intelligence security-onion wazuh soar qradar security-operations microsoft-sentinel elastic-security open-source-soc
-
Updated
Jul 18, 2026 - Python
Security Onion Packet Capture Download scripts
-
Updated
Nov 10, 2019 - Python
Python-based port scan detection pipeline using Zeek logs
-
Updated
Mar 19, 2026 - Python
Self-hosted LLM triage for Security Onion alerts
-
Updated
Jul 26, 2026 - Python
A simulated Security Operations Center (SOC) lab built with VirtualBox. This repository documents full kill-chain cyber attacks, Suricata NIDS detection validation, and a custom Python-based SOAR implementation that interacts with the Elasticsearch API to automate firewall containment.
automation virtualbox cybersecurity nids kali-linux metasploitable security-onion soar cyber-intelligence
-
Updated
Apr 21, 2026 - Python
Improve this page
Add a description, image, and links to the security-onion topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the security-onion topic, visit your repo's landing page and select "manage topics."