jakewarren / suricata-rule-generatorLinks
Quickly generate suricata rules for IOCs
☆28Updated 4 years ago
Alternatives and similar repositories for suricata-rule-generator
Users that are interested in suricata-rule-generator are comparing it to the libraries listed below
Sorting:
- Collection of Suricata rule sets that I use modified to my environments.☆40Updated 5 years ago
- ☆35Updated last year
- Suricata rule and intel index☆33Updated this week
- How to Zeek Sysmon Logs!☆102Updated 3 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆37Updated 3 years ago
- A Yara Lua output script for Suricata☆20Updated 6 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆108Updated 4 years ago
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 5 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆112Updated last year
- ☆44Updated 2 years ago
- Simple web shell scanner written in Golang.☆89Updated 6 years ago
- suricata rules to pcap☆10Updated 4 years ago
- collector/runner☆65Updated 2 months ago
- Suricata rules for the new critical vulnerabilities☆84Updated 4 years ago
- A lightweight tool to score network traffic and flag anomalies☆123Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆158Updated 7 months ago
- Mapping NSM rules to MITRE ATT&CK☆72Updated 5 years ago
- Suricata rules for network anomaly detection☆176Updated 3 weeks ago
- Scripts to detect Fast-Flux and DGA using DNS query responses☆44Updated 8 years ago
- Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulatio…☆141Updated 8 months ago
- zeek-scripts☆45Updated 6 years ago
- Bro integration with osquery☆15Updated 2 years ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)☆76Updated last month
- ☆42Updated 3 years ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated 2 years ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Updated last year
- Malware Sinkhole List in various formats☆102Updated 3 years ago
- ☆12Updated 3 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Community-based CybergON-powered Suricata rules☆12Updated 3 years ago