B0fH / yara-suricataLinks
A Yara Lua output script for Suricata
☆20Updated 6 years ago
Alternatives and similar repositories for yara-suricata
Users that are interested in yara-suricata are comparing it to the libraries listed below
Sorting:
- THOR MITRE ATT&CK Framework Coverage☆25Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆32Updated 2 years ago
- Bro integration with osquery☆15Updated 2 years ago
- ☆42Updated 3 years ago
- Cybersecurity Incidents Mind Maps☆34Updated 4 years ago
- ☆12Updated 4 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 5 years ago
- Tracking APT IOCs☆25Updated 5 years ago
- Tweettioc Splunk App☆20Updated 5 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- ☆53Updated 6 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 6 years ago
- Indicator of Compromise Scanner for CVE-2019-19781☆94Updated 5 years ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Updated last year
- Suricata rule and intel index☆33Updated this week
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 5 years ago
- How to Zeek Sysmon Logs!☆103Updated 3 years ago
- Look into EDR events from network☆25Updated last month
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆70Updated 3 years ago
- A list of IOCs applicable to PoshC2☆24Updated 5 years ago
- collector/runner☆64Updated 4 months ago
- Threat Mapping Catalogue☆18Updated 4 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated 2 years ago
- This repository contains tools used by 401trg.☆20Updated 4 years ago
- ☆44Updated 6 months ago
- Analytics for Accounting logs from Network devices☆18Updated 4 years ago
- Suricata rules to detect Winnti communication☆16Updated 7 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Collection of YARA signatures from individual research☆45Updated 2 years ago
- Carbon Black Response IR tool☆55Updated 5 years ago