OISF / suricata-trafficid
Application and service identification rules for Suricata
☆18Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for suricata-trafficid
- Suricata rule and intel index☆29Updated last month
- Community-based CybergON-powered Suricata rules☆12Updated 2 years ago
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Updated 3 years ago
- A Spicy protocol analyzer for WireGuard☆28Updated 4 years ago
- Prototype system to monitor BGP routes and alert when anomalies are identified☆14Updated 5 years ago
- We publish indicators of compromise related to our stories here. See https://blog.team-cymru.com/ for more information.☆9Updated 3 years ago
- ☆15Updated 6 years ago
- A tool to generate log messages related to interfaces, neighbor cache (ARP,NDP), IP address, routing, FIB rules, traffic control.☆31Updated last month
- Network based steganography based control channels and chat.☆8Updated 8 years ago
- This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes☆20Updated 3 years ago
- mud-visualizer is a tool to visualize MUD files☆9Updated 2 years ago
- Zeek package for tracking long connections to report them before they have completed.☆29Updated 2 years ago
- INACTIVE - http://mzl.la/ghe-archive - Zeek Extreme Performance Tuning☆26Updated 5 years ago
- Using nDPI/openDPI to detect flow protocols from a PCAP file or live NIC. This program was modified from example in nDPI and I added a pe…☆23Updated 8 years ago
- NMap XML decoding for logstash☆28Updated 2 years ago
- Ripple20 Critical Vulnerabilities - Detection Logic and Signatures☆11Updated 3 years ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆30Updated 5 months ago
- automatic enumeration and maintenance of Suricata monitoring interfaces☆11Updated 4 years ago
- A tools to work on suricata stats.log file.☆28Updated 9 years ago
- Various blog post projects.☆10Updated 5 months ago
- Python framework for manipulating bulk WHOIS data from RIRs☆19Updated 2 years ago
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆20Updated last year
- D4 core software (server and sample sensor client)☆43Updated 10 months ago
- ☆22Updated 4 years ago
- Extract, defang, resolve names and IPs from text☆23Updated 10 months ago
- collect logs and alerts from 27 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.☆16Updated last year
- smtp-user-enum.pl ported into a recon-ng module.☆9Updated 10 years ago
- DNS passive monitoring tool☆16Updated 6 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆50Updated 4 months ago