beave / sagan-rulesLinks
Rule sets for Sagan
☆104Updated 4 years ago
Alternatives and similar repositories for sagan-rules
Users that are interested in sagan-rules are comparing it to the libraries listed below
Sorting:
- Passive DNS collection using Zeek☆182Updated 2 years ago
- Bro scripts to be shared with the community☆109Updated 12 years ago
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆228Updated 4 years ago
- ☆75Updated 3 years ago
- Bro/Zeek integration with osquery☆94Updated 4 years ago
- Scripts for Bro IDS and ELK Stack☆57Updated 9 years ago
- Extract files from network traffic with Zeek.☆101Updated 5 years ago
- Various Bro scripts☆96Updated 8 years ago
- How to Zeek Sysmon Logs!☆102Updated 3 years ago
- Suricata Extreme Performance Tuning guide☆209Updated 7 years ago
- Web service for scanning pcaps with snort☆109Updated 6 years ago
- viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…☆74Updated 7 years ago
- Malware Sinkhole List in various formats☆103Updated 2 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 6 years ago
- CIF v3 -- the fastest way to consume threat intelligence☆182Updated 2 years ago
- Bro IDS programs collection.☆145Updated 5 years ago
- Passive DNS V2☆60Updated 11 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- Ready to run scripts for network analysis☆88Updated 3 months ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...☆72Updated 6 years ago
- ☆71Updated 3 years ago
- Templates for Kibana/Logstash to use with Suricata IDPS☆80Updated 9 years ago
- ☆172Updated 3 years ago
- YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signat…☆68Updated 6 years ago
- Vulnerability Data in ES☆146Updated 7 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- Honeynet Project generic authenticated datafeed protocol☆215Updated last year
- Malware/IOC ingestion and processing engine☆106Updated 6 years ago
- a network packet capture compiler☆200Updated 3 years ago