B0fH / yara-suricataLinks
A Yara Lua output script for Suricata
☆20Updated 6 years ago
Alternatives and similar repositories for yara-suricata
Users that are interested in yara-suricata are comparing it to the libraries listed below
Sorting:
- Bro integration with osquery☆15Updated 2 years ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆31Updated last year
- Detecting PowerShell Empire, Metasploit Meterpreter and Cobalt Strike agents by payload size sequence analysis and host correlation☆16Updated 6 years ago
- Tweettioc Splunk App☆20Updated 4 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- ☆41Updated 2 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 6 years ago
- Cybersecurity Incidents Mind Maps☆33Updated 3 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆39Updated 2 years ago
- Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…☆15Updated 6 years ago
- Detect kerberos attacks in pcap files☆29Updated 9 years ago
- Analytics for Accounting logs from Network devices☆17Updated 4 years ago
- Triage automation for suspect URLs☆13Updated 5 years ago
- ☆42Updated last year
- OSSEM Modular☆27Updated 4 years ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Updated last year
- Indicator of Compromise Scanner for CVE-2019-19781☆94Updated 5 years ago
- ☆12Updated 3 years ago
- Look into EDR events from network☆23Updated last month
- Suricata rule and intel index☆31Updated 2 months ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- ☆17Updated 6 months ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- A series of Bro Scripts created for detection purposes.☆19Updated 8 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year