Rule sets for Sagan
☆105Jan 7, 2021Updated 5 years ago
Alternatives and similar repositories for sagan-rules
Users that are interested in sagan-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆229Feb 9, 2021Updated 5 years ago
- rulebases for normalization with liblognorm☆12Jan 29, 2016Updated 10 years ago
- Auditd CEF support via Audispd plugin☆11Oct 23, 2014Updated 12 years ago
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆97Oct 21, 2014Updated 12 years ago
- ☆37Oct 21, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scripts targeting specific families☆13Jul 3, 2017Updated 9 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- Bro scripts to monitor for new hosts within a subnet range that aren't whitelisted/vetted.☆13Jun 28, 2013Updated 13 years ago
- ☆72Nov 17, 2021Updated 4 years ago
- CyLR - Live Response Collection Tool☆10Jul 14, 2020Updated 6 years ago
- Various Bro scripts☆97Jul 8, 2016Updated 10 years ago
- **BETA** A simple buildscript for network security monitoring on RHEL/CentOS☆31Apr 4, 2017Updated 9 years ago
- An informational repo about hunting for adversaries in your IT environment.☆14Apr 10, 2017Updated 9 years ago
- Network timing evaluation used to detect beacons, works with argus flow as the source☆20May 4, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Python library for being a CND Batman....☆36Oct 29, 2015Updated 11 years ago
- Bro scripts written by CrowdStrike Services☆152May 3, 2021Updated 5 years ago
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 10 months ago
- Quickly generate snort rules for IOCs☆18Oct 21, 2015Updated 11 years ago
- Package build sources for bulding rsyslog Ubuntu packages☆24Oct 7, 2026Updated 3 weeks ago
- Snort in Docker for Network Functions Virtualization (NFV)☆107Apr 29, 2019Updated 7 years ago
- Passive DNS collection using Zeek☆181Jun 2, 2023Updated 3 years ago
- Generates network traffic summaries.☆26Aug 13, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Various scrips☆12Oct 19, 2022Updated 4 years ago
- SQL scripts for querying event logs☆23Jul 12, 2017Updated 9 years ago
- Simple Microsoft Windows sessions event logs visualization☆154May 2, 2022Updated 4 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Mar 26, 2018Updated 8 years ago
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Feb 9, 2021Updated 5 years ago
- AYY LMAO☆12Aug 27, 2015Updated 11 years ago
- a fast samples-based log normalization library☆104Sep 8, 2026Updated last month
- Generates visualizations from the output of flow tools such as SiLK.☆33Dec 8, 2016Updated 9 years ago
- The Auditd Framework logs and applies security policy to linux auditd data☆16Jan 26, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cli interface to threatcrowd.org☆21Jul 6, 2017Updated 9 years ago
- Detect Phishing with Bro IDS☆18Feb 1, 2017Updated 9 years ago
- Honeynet Project generic authenticated datafeed protocol☆19Jun 12, 2019Updated 7 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆507Oct 21, 2026Updated last week
- The Stratosphere IPS is a free software IPS that uses network behavior to detect and block malicious actions.☆33May 24, 2016Updated 10 years ago
- IDATACO IDA Pro Plugin☆46Jun 14, 2016Updated 10 years ago
- This repository regroups the Yara Rules for the Unprotect Project☆26Nov 19, 2020Updated 5 years ago