DCSO / slinkwatchLinks
automatic enumeration and maintenance of Suricata monitoring interfaces
☆11Updated 5 years ago
Alternatives and similar repositories for slinkwatch
Users that are interested in slinkwatch are comparing it to the libraries listed below
Sorting:
- A tool to generate log messages related to interfaces, neighbor cache (ARP,NDP), IP address, routing, FIB rules, traffic control.☆32Updated 7 months ago
- Prototype system to monitor BGP routes and alert when anomalies are identified☆15Updated 6 years ago
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Updated 4 years ago
- Passive DNS server interface compliant to "Common Output Format"☆10Updated 8 years ago
- Bro analyzer that detects Google's QUIC protocol☆10Updated 4 years ago
- D4 core software (server and sample sensor client)☆42Updated last year
- Various blog post projects.☆10Updated 11 months ago
- #️⃣ 🕸️ 👤 HTTP Headers Hashing☆13Updated last year
- ☆15Updated 7 years ago
- server for indexing and querying passive DNS observations☆46Updated 2 months ago
- CVE Builder script that generates STIX formatted Exploit Target objects☆18Updated 8 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 6 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent☆12Updated 8 years ago
- An active domain name query tool to help keep track of domain name movements...☆15Updated 4 years ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Updated 8 years ago
- Flame - Send vulnerabilities reports to SIEM☆15Updated 8 years ago
- Carving tool based in Radare2 & Yara☆16Updated 6 years ago
- Historical Tracking of MAC Address Assignments☆30Updated this week
- Application and service identification rules for Suricata☆18Updated 2 years ago
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20Updated 9 years ago
- Go implementation of the Community ID flow hashing standard☆20Updated last month
- Extract, defang, resolve names and IPs from text☆23Updated last year
- An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk☆23Updated 6 years ago
- Community-based CybergON-powered Suricata rules☆12Updated 2 years ago
- Golang based web service to scan files with yara rules☆26Updated 7 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2☆14Updated 4 years ago
- Looks for GitHub org users without 2FA turned on☆9Updated 8 years ago
- Useful commands for infosec☆29Updated 2 years ago
- Library and example applications for using/abusing the information-leaky L2Trace service on Cisco switches. PSIRT Advisory: cisco-sa-2019…☆3Updated 2 years ago