TKCERT/winnti-suricata-lua external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

TKCERT/winnti-suricata-lua

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/TKCERT/winnti-suricata-lua)

Close

TKCERT / winnti-suricata-luaView on GitHubMore

• External links
• Readme badge

Suricata rules to detect Winnti communication

☆16Mar 5, 2018Updated 8 years ago

Alternatives and similar repositories for winnti-suricata-lua

Users that are interested in winnti-suricata-lua are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• TKCERT / winnti-detector

  View on GitHub
  Network detector for Winnti malware
  ☆21Mar 6, 2018Updated 8 years ago
• B0fH / yara-suricata

  View on GitHub
  A Yara Lua output script for Suricata
  ☆21Apr 7, 2019Updated 7 years ago
• sud0woodo / Urgent11-Suricata-LUA-scripts

  View on GitHub
  Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260
  ☆19Nov 28, 2019Updated 6 years ago
• daddycocoaman / volplugins

  View on GitHub
  Repository of Volatility3 plugins
  ☆23Mar 22, 2023Updated 3 years ago
• TKCERT / sysmon-config

  View on GitHub
  Please see other maintained fork:
  ☆17Dec 4, 2025Updated 8 months ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• codecrack3 / HTA-Exploit-

  View on GitHub
  Microsoft Windows HTA (HTML Application) - Remote Code Execution
  ☆30Aug 21, 2015Updated 10 years ago
• NextronSystems / go-elasticsearch

  View on GitHub
  Simple ElasticSearch API for Golang
  ☆15Dec 3, 2018Updated 7 years ago
• jas502n / BeaconTool

  View on GitHub
  Practice Go programming and implement CobaltStrike's Beacon in Go
  ☆14Mar 19, 2020Updated 6 years ago
• DCSO / balboa

  View on GitHub
  server for indexing and querying passive DNS observations
  ☆50Jul 21, 2026Updated 3 weeks ago
• binarlyhq / binarly-sdk

  View on GitHub
  Binarly SDK v1
  ☆14Dec 18, 2016Updated 9 years ago
• proferosec / Threat-Intelligence

  View on GitHub
  A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.
  ☆10Sep 17, 2019Updated 6 years ago
• Sh3llyR / statiStrings

  View on GitHub
  YARA Rule Strings Statistics Calculator and Malware Research Helper
  ☆14Jul 24, 2021Updated 5 years ago
• spyre-project / spyre

  View on GitHub
  simple YARA-based IOC scanner
  ☆181Mar 17, 2026Updated 4 months ago
• h0rv4th / c2matrix-analyzer

  View on GitHub
  Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack
  ☆13Apr 18, 2020Updated 6 years ago
• End-to-end encrypted cloud storage - Proton Drive • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
• inversecos / valentinewaifu

  View on GitHub
  ☆15Feb 12, 2023Updated 3 years ago
• glennie / tinyca2

  View on GitHub
  tinyCA2
  ☆17Aug 29, 2015Updated 10 years ago
• Karneades / SigmaFilterCheck

  View on GitHub
  Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)
  ☆16Feb 1, 2021Updated 5 years ago
• CERT-Bund / yara-exporter

  View on GitHub
  Exporting MISP event attributes to yara rules usable with Thor apt scanner
  ☆25Mar 27, 2017Updated 9 years ago
• mrlesmithjr / ansible-suricata

  View on GitHub
  ☆12Jan 28, 2020Updated 6 years ago
• albertzsigovits / writeups

  View on GitHub
  Reviews and tests of security products
  ☆17Dec 28, 2024Updated last year
• mihailik / pe.js

  View on GitHub
  PE file format reader in JavaScript
  ☆26Apr 10, 2019Updated 7 years ago
• darienhuss / dns_sigs

  View on GitHub
  Create Suricata and Snort DNS signatures given a single domain or list of domains in a file.
  ☆18Nov 13, 2017Updated 8 years ago
• snemes / malware-analysis

  View on GitHub
  ☆23Aug 1, 2020Updated 6 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• dmb2168 / OAuthHunting

  View on GitHub
  ☆53May 21, 2018Updated 8 years ago
• PonyPC / myaut_contrib

  View on GitHub
  mod to myaut2exe decompiler
  ☆20Jul 28, 2017Updated 9 years ago
• EmergingThreats / et-luajit-scripts

  View on GitHub
  ☆74Feb 17, 2022Updated 4 years ago
• airbus-cert / PSTrace

  View on GitHub
  Trace ScriptBlock execution for powershell v2
  ☆40Jan 14, 2020Updated 6 years ago
• omarghader / pefile-go

  View on GitHub
  Golang port of pefile
  ☆25Jul 17, 2017Updated 9 years ago
• thomaspatzke / EQUEL

  View on GitHub
  An Elasticsearch QUEry Language
  ☆58Jul 3, 2017Updated 9 years ago
• Neo23x0 / panopticon

  View on GitHub
  A YARA Rule Performance Measurement Tool
  ☆64Feb 26, 2024Updated 2 years ago
• carbonblack / mockc2

  View on GitHub
  An interactive mock C2 server
  ☆17Feb 25, 2023Updated 3 years ago
• ipworkx / ecs-suricata

  View on GitHub
  ☆12Apr 23, 2020Updated 6 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• PlagueHO / LoopbackAdapter

  View on GitHub
  A PowerShell module for creating and removing Loopback Network Adapters on Windows using Device Conslole (DevCon.exe)
  ☆15Feb 26, 2021Updated 5 years ago
• nabeelxy / syara

  View on GitHub
  SYARA: Super YARA Rules for GenAI Era
  ☆18Mar 5, 2026Updated 5 months ago
• t4skforce / docker-novnc-winbox

  View on GitHub
  Mikrotik's Winbox in a docker container accessible via noVNC through a web browser.
  ☆13May 12, 2025Updated last year
• 100DaysofYARA / 2022

  View on GitHub
  ☆23Dec 15, 2022Updated 3 years ago
• conix-security / bl2ru2

  View on GitHub
  Mass Suricata rules creator, from a list of domain
  ☆14Sep 14, 2018Updated 7 years ago
• Neo23x0 / exotron

  View on GitHub
  Sandbox feature upgrade with the help of wrapped samples
  ☆76Jun 23, 2018Updated 8 years ago
• DissectMalware / base64_substring

  View on GitHub
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Jul 13, 2018Updated 8 years ago