idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
☆286Jul 10, 2025Updated last year
Alternatives and similar repositories for py-idstools
Users that are interested in py-idstools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scirius is a web application for Suricata ruleset management and threat hunting.☆686May 22, 2026Updated 5 months ago
- Web service for scanning pcaps with snort☆110Jul 4, 2018Updated 8 years ago
- Pure python parser for Snort/Suricata rules.☆35Mar 13, 2024Updated 2 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆507Oct 21, 2026Updated last week
- Resolve URL or refering site based on alert or http log match in eve log output from suricata submit to Cuckoo as url task☆18Nov 7, 2016Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Suricata, Snort and Zeek IDS rule and pcap testing system☆524Oct 13, 2026Updated 2 weeks ago
- A Go(lang) Library for Handling Snort and Suricata unified2 Log Files☆16Jul 28, 2021Updated 5 years ago
- Templates for Kibana/Logstash to use with Suricata IDPS☆81Mar 12, 2016Updated 10 years ago
- Snort rule parser/validator written in python.☆20May 16, 2023Updated 3 years ago
- The tool for updating your Suricata rules.☆297Jul 7, 2026Updated 3 months ago
- Improvements of/over the original rule2alert☆56Dec 28, 2014Updated 11 years ago
- Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.☆347Apr 11, 2024Updated 2 years ago
- ☆74Feb 17, 2022Updated 4 years ago
- IDS Utility Belt For Automating/Testing Various Things☆29Oct 14, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Pulled Pork for Snort and Suricata rule management (from Google code)☆441Jul 7, 2021Updated 5 years ago
- [ABANDONED] A Docker container running Suricata and the ELK stack.☆21Jan 27, 2016Updated 10 years ago
- Python library for managing malware feeds and blacklists published online by third parties.☆10Nov 13, 2015Updated 10 years ago
- Easy bake oven for sguil transcripts☆14Jan 14, 2016Updated 10 years ago
- Attack Detection☆1,357Aug 31, 2022Updated 4 years ago
- Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OIS…☆6,803Updated this week
- A dsniff project using bro☆11Jan 25, 2016Updated 10 years ago
- a network packet capture compiler☆206Apr 28, 2022Updated 4 years ago
- A Suricata based NDR distribution☆1,591Sep 13, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Maltego tranforms for mapping Honeypot systems.☆15Dec 15, 2014Updated 11 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆120Apr 26, 2024Updated 2 years ago
- ☆72Nov 17, 2021Updated 4 years ago
- cuckoo sandbox patches and scripts☆14Jan 30, 2014Updated 12 years ago
- Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS☆184Sep 13, 2022Updated 4 years ago
- ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan☆229Feb 9, 2021Updated 5 years ago
- Suricata Extreme Performance Tuning guide☆212Mar 15, 2018Updated 8 years ago
- Evading Snort Intrusion Detection System.☆78Sep 18, 2021Updated 5 years ago
- Script for generating Bro intel files from pdf or html reports☆76Dec 7, 2015Updated 10 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bro IDS Dockerfile☆128Sep 14, 2019Updated 7 years ago
- cuckoo-1.1 fork with suricata/moloch/clamav and other goodies☆23Feb 17, 2015Updated 11 years ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆199Updated this week
- Wireshark plugin to display Suricata analysis info☆92Nov 5, 2021Updated 4 years ago
- ☆84Aug 7, 2013Updated 13 years ago
- Suricata rules for network anomaly detection☆184May 7, 2026Updated 5 months ago
- IRMA is an asynchronous & customizable analysis system for suspicious files.☆284Mar 1, 2023Updated 3 years ago