| 1 | 34,025 | 28,569 | cef | format/send CEF logs via API+syslog or client program |
| 2 | 64,667 | 41,737 | arc_weld | Toolkit for building ArcSight resources |
| 3 | 100,957 | 74,024 | nwsdk | allows users to run queries, extracts, and generate cef alerts |
| 4 | 131,839 | 94,007 | pcap_simple | A pure ruby BitStruct implementation of a pcap file reader |
| 5 | 150,977 | 129,210 | ruby-taxii | implement api-alike for python libtaxii https://github.com/TAXIIProject/libtaxii |
| 6 | 158,057 | 94,007 | oober | flexible TAXII client for integrating cyber threat information with all your stuff |