RedELK vs dsiem

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. (by outflanknl)

Source Code

Suggest alternative

Edit details

dsiem

Security event correlation engine for ELK stack (by defenxor)

Siem Elk ElasticSearch Logstash ossim Security

Source Code

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

RedELK		dsiem
	Project
5	Mentions	3
2,288	Stars	431
2.7%	Growth	0.5%
7.1	Activity	6.0
3 months ago	Latest Commit	about 1 month ago
Python	Language	Go
BSD 3-clause "New" or "Revised" License	License	GNU General Public License v3.0 only

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

RedELK

Posts with mentions or reviews of RedELK. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-04.

What project ideas are there for a cybersecurity homelab?
2 projects | /r/AskNetsec | 4 Jun 2023

Play with RedELK for learning ELK and monitoring blue team activities - https://github.com/outflanknl/RedELK
Can anyone describe their red team infrastructure?
4 projects | /r/redteamsec | 4 May 2023

I'd love to build a tf setup that utilizes redirectors and the "standard" setup along with RedELK so I'd be curious what you find and what others suggest.
Awesome Penetration Testing
124 projects | dev.to | 6 Oct 2021

RedELK - Track and alarm about Blue Team activities while providing better usability in long term offensive operations.
outflanknl/RedELK - Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
1 project | /r/GithubSecurityTools | 30 Sep 2021
Documentation / Logging - what are you using?
1 project | /r/redteamsec | 25 Jan 2021

Redelk - https://github.com/outflanknl/RedELK

dsiem

Posts with mentions or reviews of dsiem. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-10-16.

DSIEM Common questions
1 project | /r/elasticsearch | 28 Nov 2022
New blue team
11 projects | /r/blueteamsec | 16 Oct 2022
dsiem: Security event correlation engine for ELK stack
1 project | /r/purpleteamsec | 3 Nov 2021

What are some alternatives?

When comparing RedELK and dsiem you can also consider the following projects:

HELK - The Hunting ELK

go-stash - go-stash is a high performance, free and open source server-side data processing pipeline that ingests data from Kafka, processes it, and then sends it to ElasticSearch.

wazuh-dashboard-plugins - Plugins for Wazuh Dashboard

velociraptor - Digging Deeper....

awesome-pcaptools - A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

docker-elk - The Elastic stack (ELK) powered by Docker and Compose.

praeco - Elasticsearch alerting made simple.

RedEye - RedEye is a visual analytic tool supporting Red & Blue Team operations

masscan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

sysmon-modular - A repository of sysmon configuration modules

wazuh-ruleset - Wazuh - Ruleset

adversary_emulation_library - An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.