Alternatives and similar repositories for py-idstools

Users that are interested in py-idstools are comparing it to the libraries listed below

• secureworks / flowsynth
  a network packet capture compiler
  ☆204Updated 3 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆505Updated this week
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆249Updated last year
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆214Updated 7 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆668Updated 3 months ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆103Updated 5 years ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆450Updated last year
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆283Updated last month
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆473Updated this week
• beave / sagan-rules
  Rule sets for Sagan
  ☆106Updated 4 years ago
• Ptr32Void / OSTrICa
  ☆307Updated 8 years ago
• shendo / websnort
  Web service for scanning pcaps with snort
  ☆110Updated 7 years ago
• 360netlab / DGA
  Suspicious DGA from PDNS and Sandbox.
  ☆187Updated 3 years ago
• markofu / pcaps
  Public Repository of all Publicly Available Packet Captures that I've used or come across
  ☆182Updated 12 years ago
• Cisco-Talos / file2pcap
  ☆174Updated 4 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 7 years ago
• andrewaeva / DGA
  The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research th…
  ☆221Updated 8 years ago
• blacktop / docker-cuckoo
  Cuckoo Sandbox Dockerfile
  ☆330Updated 5 years ago
• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆354Updated last year
• hpfeeds / hpfeeds
  Honeynet Project generic authenticated datafeed protocol
  ☆217Updated 2 years ago
• exp0se / dga_detector
  DGA Domains detection
  ☆69Updated 7 years ago
• armbues / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆437Updated 2 years ago
• mandiant / ioc_writer
  ☆206Updated 2 years ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆121Updated 7 years ago
• AlienVault-OTX / OTX-Python-SDK
  The Python SDK for AlienVault OTX
  ☆392Updated last year
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆470Updated 6 years ago
• 1ultimat3 / PcapViz
  Visualize network topologies and collect graph statistics based on pcap files
  ☆352Updated 2 years ago
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆240Updated 4 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated 2 years ago
• MITRECND / chopshop
  Protocol Analysis/Decoder Framework
  ☆496Updated 2 years ago