awesome-soc-appliances

List of free software appliances for building a Security Operations Center (SOC)

Full Packet Capture Solution

• Arkime - Large scale, full packet capturing, indexing, and database system.

IDS

• Snort
• Suricata

Network Traffic Logging

• Zeek

Endpoint Visibility

• osquery

Log Visualization

• ELK Stack: Elastic Search + Logstash + Kibana

Team Collaboration

• Mattermost - Locally-deployed group chat with support for private channels and file sharing.