g-rd / snortparserLinks
Snort rule parser/validator written in python.
☆19Updated 2 years ago
Alternatives and similar repositories for snortparser
Users that are interested in snortparser are comparing it to the libraries listed below
Sorting:
- Download pcap files from http://www.malware-traffic-analysis.net/☆81Updated 8 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆108Updated 4 years ago
- Suricata Verification Tests - Testing Suricata Output☆118Updated this week
- ☆42Updated 3 years ago
- This is an open source Snort rules repository☆29Updated 3 years ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- Pure python parser for Snort/Suricata rules.☆33Updated last year
- Explore Indicators of Compromise Automatically☆97Updated 5 years ago
- Repository of yara rules☆47Updated 10 years ago
- Suricata rules for network anomaly detection☆182Updated 2 months ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated 2 years ago
- High fidelity JA3 & JA3S combinations for known botnets and alike☆11Updated 6 years ago
- Triconex TriStation utilities and tools☆80Updated 7 years ago
- A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.☆16Updated 8 years ago
- Bro integration with osquery☆15Updated 2 years ago
- Repository collecting and automagically processing public threat intelligence reports.☆18Updated 5 years ago
- zeek-scripts☆45Updated 7 years ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated 2 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 7 years ago
- Snorpy is a python script the gives a Gui interface to help those new to snort create rules.☆65Updated last year
- A map displaying threat actors from the misp-galaxy☆33Updated 3 years ago
- Malware Sinkhole List in various formats☆104Updated 3 years ago
- Suricata rule and intel index☆33Updated 3 weeks ago
- A Yara Lua output script for Suricata☆20Updated 6 years ago
- A set of ICS IDS rules for use with Suricata.☆51Updated 2 years ago
- Bro PCAP Processing and Tagging API☆28Updated 8 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- Scripts to detect Fast-Flux and DGA using DNS query responses☆44Updated 8 years ago
- Import Mitre Att&ck into Neo4j database☆39Updated 3 years ago
- A HIDS (host-based intrusion detection system) for verifying the integrity of a system.☆60Updated this week