Alternatives and similar repositories for bl2ru2

Users that are interested in bl2ru2 are comparing it to the libraries listed below

• B0fH / yara-suricata
  A Yara Lua output script for Suricata
  ☆20Updated 6 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆33Updated 2 months ago
• ipworkx / ecs-suricata
  ☆12Updated 5 years ago
• TKCERT / winnti-suricata-lua
  Suricata rules to detect Winnti communication
  ☆16Updated 7 years ago
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 4 years ago
• corelight / http-stalling-detector
  Detect HTTP stalling attacks like slowloris with Bro
  ☆19Updated 7 years ago
• jasonish / suricata-rpms
  Suricata RPMs for CentOS/RHEL and Fedora
  ☆19Updated 3 months ago
• clong / vagrant-ids
  An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk
  ☆23Updated 7 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 5 years ago
• regit / suriwire
  Wireshark plugin to display Suricata analysis info
  ☆95Updated 4 years ago
• StamusNetworks / KTS6
  Kibana 6 Templates for Suricata IDPS Threat Hunting
  ☆24Updated 6 years ago
• tylabs / dovehawk
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Updated 4 years ago
• corelight / top-dns
  Top DNS Measurement for Bro
  ☆11Updated 5 years ago
• MISP / ansible
  MISP - Ansible installation script
  ☆22Updated 6 years ago
• csirtgadgets / csirtg-smrt-v1
  the fastest way to consume threat intelligence.
  ☆31Updated 2 years ago
• binorassocies / brostash
  brostash: Linux distribution based on Debian and focusing on network security events collection
  ☆33Updated 5 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated 2 years ago
• cert-ee / s4a
  S4A main repository. SaltStack states, install script and build scripts
  ☆27Updated this week
• notx11 / urlScan2Hive
  Triage automation for suspect URLs
  ☆13Updated 6 years ago
• Cyberg-ON / Timon-Rules
  Community-based CybergON-powered Suricata rules
  ☆12Updated 3 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 7 years ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆37Updated 2 years ago
• philhagen / ip2geo
  Script to perform bulk local GeoIP lookups (ASN and geo) for IP addresses
  ☆102Updated 5 years ago
• hosom / bro-otx
  Integrate Zeek with Alienvault OTX
  ☆25Updated 5 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 4 years ago
• chrisjd20 / Snorpy
  Snorpy is a python script the gives a Gui interface to help those new to snort create rules.
  ☆64Updated last year
• RamadhanAmizudin / python-icap-yara
  An ICAP Server with yara scanner for URL and content.
  ☆58Updated last year
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Updated 4 years ago
• OwlH-net / OwlH-UI
  OwlH Master API Web User Interface
  ☆12Updated last year
• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆33Updated 2 months ago