
DShield-SIEM
DShield Sensor Log Collection with ELK
defensive-toolsincident-responseintrusion-detection+4

DShield Sensor Log Collection with ELK

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

Automatically generated Sysmon parser for Azure Sentinel

A Zeek OpenVPN protocol analyzer plugin.