OISF / suricata-verify
Suricata Verification Tests - Testing Suricata Output
☆102Updated last week
Related projects ⓘ
Alternatives and complementary repositories for suricata-verify
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆98Updated 3 years ago
- Suricata rules for network anomaly detection☆153Updated 2 months ago
- The tool for updating your Suricata rules.☆255Updated 4 months ago
- Suricata rule and intel index☆29Updated last month
- The Security Analyst’s Guide to Suricata☆52Updated 5 months ago
- Mapping NSM rules to MITRE ATT&CK☆68Updated 4 years ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆64Updated last week
- Open source endpoint agent providing host information to Zeek. [v2]☆66Updated last month
- Wireshark plugin to display Suricata analysis info☆91Updated 3 years ago
- Cisco Orbital - Osquery queries by Talos☆123Updated 2 months ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆184Updated 3 years ago
- How to Zeek Sysmon Logs!☆101Updated 2 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆89Updated last year
- A website and framework for testing NIDS detection☆56Updated 3 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆113Updated 6 years ago
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆132Updated 4 years ago
- ☆46Updated 2 years ago
- ☆125Updated 11 months ago
- Suricata Extreme Performance Tuning guide☆204Updated 6 years ago
- Signature engine for all your logs☆161Updated last year
- ☆158Updated 3 years ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆144Updated 8 months ago
- Docker files for building Zeek.☆86Updated last year
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆20Updated last year
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆84Updated last year
- Plugin providing native AF_Packet support for Zeek.☆33Updated 7 months ago
- Sigma Detection Rule Repository☆85Updated 4 years ago
- Zeek support for Community ID flow hashing.☆34Updated last year
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆30Updated 5 months ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆452Updated this week