LORG Logo

LORG

0
Free
Visit Website

LORG is a tool designed for advanced HTTPD logfile security analysis and forensics, utilizing state-of-the-art approaches like signature-based, statistical, and machine learning techniques to detect attacks against web applications within HTTP traffic logs. It groups detected incidents into sessions, classifies them as 'hand-crafted' or automated, performs geotargeting and DNSBL lookups, and quantifies attacks based on anomalies in HTTP responses.

FEATURES

ALTERNATIVES

Elastic is a search-powered AI company that enables users to find answers from all data in real-time at scale.

Commercial

A visualization app for hpfeeds logs.

Free

Standalone SIGMA-based detection tool for EVTX, Auditd, Sysmon for Linux, XML or JSONL/NDJSON Logs.

Free

IBM QRadar is a SIEM solution for real-time threat detection.

Free

A security information and event management solution that collects, normalizes, and analyzes log data from across an organization's infrastructure to enhance threat detection and compliance reporting.

Commercial

Sysmon for Linux is a tool that monitors and logs system activity with advanced filtering to identify malicious activity.

Free

Python library and command line tools for log visualization with interactive plots.

Free

Access a repository of Analytic Stories and security guides mapped to industry frameworks, with Splunk searches, machine learning algorithms, and playbooks for threat detection and response.

Free

PINNED