All projects
Repositories in this selection 12 · UTC 2026-11-04
CompareRankProjectStarFork30-day trend7-day net changeLast pushSign in to save
1—Wwazuh / wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.C++NOASSERTION · Restricted / unknownInsufficient rank history17,5442,580——2026-11-02
2—SSigmaHQ / sigmaMain Sigma Rule RepositoryPythonNOASSERTION · Restricted / unknownInsufficient rank history11,3932,905——2026-11-02
3—GGraylog2 / graylog2-serverFree and open log managementJavaNOASSERTION · Restricted / unknownInsufficient rank history8,1721,135——2026-11-03
4—Bbeenuar / AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.PythonMIT · PermissiveInsufficient rank history6,814702——2026-11-03
5—Mmikeroyal / Digital-Forensics-GuideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.PythonUnknown · Restricted / unknownInsufficient rank history3,208400——2024-01-04
6—Mmatanolabs / matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWSRustApache-2.0 · PermissiveInsufficient rank history1,707120——2025-01-08
7—Ttenzir / tenzirTenzir is the data pipeline engine for security teams.C++BSD-3-Clause · PermissiveInsufficient rank history770110——2026-11-02
8—Aaixisstudio / SnitchAuthor description: Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.PythonAGPL-3.0 · Share derivative sourceInsufficient rank history69249——2026-11-01
9—TTonyPhipps / MeerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.PowerShellGPL-3.0 · Share derivative sourceInsufficient rank history48384——2024-11-15
10—VVigil-SOC / vigilVigil SOC: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.PythonApache-2.0 · PermissiveInsufficient rank history41795——2026-11-02
11—Ddogoncouch / LogESPOpen Source SIEM (Security Information and Event Management system).PythonMIT · PermissiveInsufficient rank history22769——2023-08-24
12—Ttimescale / rsigmaA complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MCP and LSP servers :crab:RustMIT · PermissiveInsufficient rank history18319——2026-11-02
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.