B0fH / yara-suricataLinks
A Yara Lua output script for Suricata
☆20Updated 6 years ago
Alternatives and similar repositories for yara-suricata
Users that are interested in yara-suricata are comparing it to the libraries listed below
Sorting:
- THOR MITRE ATT&CK Framework Coverage☆25Updated 5 years ago
- Old home of LimaCharlie, open source EDR☆32Updated 2 years ago
- ☆42Updated 3 years ago
- ☆12Updated 3 years ago
- Bro integration with osquery☆15Updated 2 years ago
- Collection of YARA signatures from individual research☆46Updated 2 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 6 years ago
- Suricata rule and intel index☆33Updated last month
- Tweettioc Splunk App☆20Updated 5 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- Cybersecurity Incidents Mind Maps☆34Updated 4 years ago
- Threat intelligence and threat detection indicators (IOC, IOA)☆52Updated 5 years ago
- Look into EDR events from network☆25Updated 2 weeks ago
- Suricata rules to detect Winnti communication☆16Updated 7 years ago
- ☆53Updated 6 years ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Updated last year
- Tracking APT IOCs☆25Updated 5 years ago
- How to Zeek Sysmon Logs!☆103Updated 3 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Updated 5 years ago
- Triage automation for suspect URLs☆13Updated 6 years ago
- Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…☆15Updated 6 years ago
- Notebooks created to attack and secure Active Directory environments☆28Updated 6 years ago
- Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies☆105Updated 4 years ago
- OSSEM Modular☆27Updated 5 years ago
- Proof-of-concept for phishing intelligence in Elastic☆15Updated 6 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated 2 years ago
- Carbon Black Response IR tool☆55Updated 4 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆38Updated 3 years ago
- ☆44Updated 4 months ago