** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
☆229Feb 9, 2021Updated 5 years ago
Alternatives and similar repositories for sagan
Users that are interested in sagan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rule sets for Sagan☆105Jan 7, 2021Updated 5 years ago
- Scirius is a web application for Suricata ruleset management and threat hunting.☆686May 22, 2026Updated 5 months ago
- viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…☆74Aug 13, 2017Updated 9 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆507Oct 21, 2026Updated last week
- Ruby On Rails Application For Network Security Monitoring☆1,007Jun 6, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Haka runtime☆447Nov 22, 2017Updated 8 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Oct 21, 2014Updated 12 years ago
- Suricata Extreme Performance Tuning guide☆212Mar 15, 2018Updated 8 years ago
- Protocol Analysis/Decoder Framework☆494Dec 19, 2022Updated 3 years ago
- Tool to gather Threat Intelligence indicators from publicly available sources☆654Mar 14, 2019Updated 7 years ago
- Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management☆3,135Apr 16, 2021Updated 5 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆36Apr 21, 2025Updated last year
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆519Oct 21, 2022Updated 4 years ago
- Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS☆184Sep 13, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Python bindings to libhtp☆31Oct 13, 2020Updated 6 years ago
- Compare multiple log formats against malware reputation lists.☆88Jul 27, 2017Updated 9 years ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆198Sep 23, 2024Updated 2 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- Malcom - Malware Communications Analyzer☆1,174Nov 29, 2017Updated 8 years ago
- Pulled Pork for Snort and Suricata rule management (from Google code)☆441Jul 7, 2021Updated 5 years ago
- A tool for analyzing firewall rules☆160Jan 29, 2018Updated 8 years ago
- An open source framework for enterprise level automated analysis.☆392Jun 27, 2022Updated 4 years ago
- Scripts used to create ISO installers of ROCK for offline installation.☆10Mar 13, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- How to Zeek Sysmon Logs!☆102Feb 12, 2022Updated 4 years ago
- idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)☆286Jul 10, 2025Updated last year
- 🌴 The STIX2 Pattern expression parser for humans☆26Jun 29, 2019Updated 7 years ago
- Python bindings for ssdeep☆91Feb 6, 2022Updated 4 years ago
- A Simple QUEry and Report Tool☆140Sep 17, 2019Updated 7 years ago
- Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of…☆1,796Jul 26, 2021Updated 5 years ago
- Templates for Kibana/Logstash to use with Suricata IDPS☆81Mar 12, 2016Updated 10 years ago
- Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.☆13Jun 28, 2013Updated 13 years ago
- Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support☆3,723Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆199Oct 6, 2025Updated last year
- Wireshark plugin to display Suricata analysis info☆92Nov 5, 2021Updated 4 years ago
- Fast Incident Response☆2,048Sep 14, 2026Updated last month
- Security event correlation engine for ELK stack☆446Aug 19, 2026Updated 2 months ago
- Isolated, Scalable, & Lightweight Environment for Training☆113Jun 24, 2019Updated 7 years ago
- Arkime is an open source, large scale, full packet capturing, indexing, and database system.☆7,554Updated this week
- Dockerfiles for NSM tools☆84Apr 14, 2017Updated 9 years ago