OISF / suricata-update
The tool for updating your Suricata rules.
☆270Updated last month
Alternatives and similar repositories for suricata-update
Users that are interested in suricata-update are comparing it to the libraries listed below
Sorting:
- Suricata, Snort and Zeek IDS rule and pcap testing system☆477Updated 4 months ago
- Suricata Verification Tests - Testing Suricata Output☆107Updated this week
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆457Updated this week
- Scirius is a web application for Suricata ruleset management and threat hunting.☆650Updated 3 weeks ago
- idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)☆281Updated last year
- Suricata rules for network anomaly detection☆160Updated 3 weeks ago
- Suricata IDS/IPS log analytics using the Elastic Stack.☆238Updated 3 years ago
- Suricata Extreme Performance Tuning guide☆208Updated 7 years ago
- a network packet capture compiler☆199Updated 3 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆117Updated 7 years ago
- Zeek IDS Dockerfile☆101Updated 2 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated last year
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆110Updated last year
- Passive Real-time Asset Detection System☆237Updated 11 months ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆178Updated 7 months ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆185Updated 2 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆102Updated 3 years ago
- Wazuh - Ruleset☆446Updated 7 months ago
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆405Updated this week
- A Zeek log writer plugin that publishes to Kafka.☆47Updated 4 months ago
- Super Next generation Advanced Reactive honEypot☆463Updated 11 months ago
- The Python SDK for AlienVault OTX☆373Updated last year
- Mapping NSM rules to MITRE ATT&CK☆71Updated 4 years ago
- Documentation of Cortex☆174Updated last year
- Python library using the MISP Rest API☆461Updated last month
- File Scanning Framework☆292Updated 3 years ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆793Updated 2 years ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆175Updated 4 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆80Updated last week
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆26Updated last year