dsiem vs RedELK

dsiem

Security event correlation engine for ELK stack (by defenxor)

Source Code

Suggest alternative

Edit details

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations. (by outflanknl)

Security Siem Monitoring Elastic ElasticSearch Logstash Kibana red-teaming

Source Code

Suggest alternative

Edit details

Our great sponsors

WorkOS - The modern identity platform for B2B SaaS

InfluxDB - Power Real-Time Data Analytics at Scale

SaaSHub - Software Alternatives and Reviews

Our great sponsors

dsiem		RedELK
	Project
3	Mentions	5
431	Stars	2,288
0.5%	Growth	2.7%
6.0	Activity	7.1
29 days ago	Latest Commit	3 months ago
Go	Language	Python
GNU General Public License v3.0 only	License	BSD 3-clause "New" or "Revised" License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

dsiem

Posts with mentions or reviews of dsiem. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-10-16.

DSIEM Common questions
1 project | /r/elasticsearch | 28 Nov 2022
New blue team
11 projects | /r/blueteamsec | 16 Oct 2022
dsiem: Security event correlation engine for ELK stack
1 project | /r/purpleteamsec | 3 Nov 2021

RedELK

Posts with mentions or reviews of RedELK. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-04.

What project ideas are there for a cybersecurity homelab?
2 projects | /r/AskNetsec | 4 Jun 2023

Play with RedELK for learning ELK and monitoring blue team activities - https://github.com/outflanknl/RedELK
Can anyone describe their red team infrastructure?
4 projects | /r/redteamsec | 4 May 2023

I'd love to build a tf setup that utilizes redirectors and the "standard" setup along with RedELK so I'd be curious what you find and what others suggest.
Awesome Penetration Testing
124 projects | dev.to | 6 Oct 2021

RedELK - Track and alarm about Blue Team activities while providing better usability in long term offensive operations.
outflanknl/RedELK - Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
1 project | /r/GithubSecurityTools | 30 Sep 2021
Documentation / Logging - what are you using?
1 project | /r/redteamsec | 25 Jan 2021

Redelk - https://github.com/outflanknl/RedELK

What are some alternatives?

When comparing dsiem and RedELK you can also consider the following projects:

go-stash - go-stash is a high performance, free and open source server-side data processing pipeline that ingests data from Kafka, processes it, and then sends it to ElasticSearch.

HELK - The Hunting ELK

velociraptor - Digging Deeper....

wazuh-dashboard-plugins - Plugins for Wazuh Dashboard

docker-elk - The Elastic stack (ELK) powered by Docker and Compose.

awesome-pcaptools - A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

RedEye - RedEye is a visual analytic tool supporting Red & Blue Team operations

praeco - Elasticsearch alerting made simple.

sysmon-modular - A repository of sysmon configuration modules

masscan - TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

adversary_emulation_library - An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

wazuh-ruleset - Wazuh - Ruleset