DynamiteAI / dynamite-nsm

Related projects: ⓘ

• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆152Updated 3 weeks ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆191Updated 2 years ago
• AlienVault-OTX / OTX-Suricata
  The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…
  ☆105Updated 4 months ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆202Updated 6 years ago
• ccdcoe / CDMCS
  Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
  ☆99Updated 3 months ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆230Updated 3 years ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆99Updated last year
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆84Updated 11 months ago
• robcowart / synesis_lite_snort
  Snort IDS/IPS log analytics using the Elastic Stack.
  ☆81Updated 3 years ago
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆255Updated last year
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆68Updated 4 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆229Updated 3 months ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆113Updated 6 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆420Updated last month
• harvard-itsecurity / docker-misp
  Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
  ☆174Updated 3 years ago
• tylabs / dovehawk
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆121Updated 3 years ago
• zeek / zeekctl
  Tool for managing Zeek deployments.
  ☆53Updated last month
• MISP / misp-dashboard
  A live dashboard for a real-time overview of threat intelligence from MISP instances
  ☆192Updated last year
• secureworks / dalton
  Suricata and Snort IDS rule and pcap testing system
  ☆435Updated last week
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆622Updated last month
• zeek / packages
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆128Updated this week
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆141Updated last year
• quadrantsec / sagan
  Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…
  ☆153Updated last week
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆167Updated last year
• counterflow-ai-archive / dragonfly-mle
  ☆52Updated this week
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆181Updated last year
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆56Updated 3 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆170Updated 11 months ago
• MarkBaggett / domain_stats
  ☆207Updated 10 months ago
• NVISOsecurity / ee-outliers
  Open-source framework to detect outliers in Elasticsearch events
  ☆203Updated last year