Alternatives and similar repositories for py-idstools:

Users that are interested in py-idstools are comparing it to the libraries listed below

• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆233Updated 9 months ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆471Updated last month
• secureworks / flowsynth
  a network packet capture compiler
  ☆197Updated 2 years ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆207Updated 6 years ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆644Updated 2 months ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆100Updated 4 years ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆266Updated 2 months ago
• shendo / websnort
  Web service for scanning pcaps with snort
  ☆108Updated 6 years ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆115Updated 6 years ago
• StamusNetworks / Amsterdam
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Updated 2 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated last year
• robcowart / synesis_lite_suricata
  Suricata IDS/IPS log analytics using the Elastic Stack.
  ☆238Updated 3 years ago
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆443Updated this week
• 360netlab / DGA
  Suspicious DGA from PDNS and Sandbox.
  ☆183Updated 2 years ago
• Cisco-Talos / file2pcap
  ☆169Updated 3 years ago
• hpfeeds / hpfeeds
  Honeynet Project generic authenticated datafeed protocol
  ☆215Updated last year
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆146Updated 3 years ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆100Updated 2 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆102Updated 4 years ago
• Ptr32Void / OSTrICa
  ☆308Updated 7 years ago
• Yelp / threat_intel
  Threat Intelligence APIs
  ☆276Updated last year
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆433Updated last year
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• ahm3dhany / IDS-Evasion
  Evading Snort Intrusion Detection System.
  ☆77Updated 3 years ago
• DynamiteAI / dynamite-nsm
  DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…
  ☆170Updated last year
• michalpurzynski / bro-gramming
  Bro IDS programs collection.
  ☆146Updated 5 years ago
• cvandeplas / suricata_stats
  Statistics parsing for suricata
  ☆17Updated 11 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆100Updated 3 years ago
• exp0se / dga_detector
  DGA Domains detection
  ☆63Updated 6 years ago