jasonish / simple-idsLinks
A very simple way to try Suricata and EveBox
☆14Updated 3 months ago
Alternatives and similar repositories for simple-ids
Users that are interested in simple-ids are comparing it to the libraries listed below
Sorting:
- ☆14Updated 10 months ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆53Updated last month
- Tiny nDPI based deep packet inspection daemons / toolkit.☆81Updated last week
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆89Updated last year
- Suricata Extreme Performance Tuning guide - Mark II☆117Updated 7 years ago
- Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search☆458Updated 2 weeks ago
- Argus Sensor☆64Updated 2 weeks ago
- Suricata Verification Tests - Testing Suricata Output☆108Updated this week
- ☆35Updated 4 months ago
- ☆13Updated 3 months ago
- Open source endpoint agent providing host information to Zeek. [v2]☆82Updated this week
- provides a Suricata Eve output for Kafka with Suricate Eve plugin☆14Updated 3 years ago
- The tool for updating your Suricata rules.☆271Updated last month
- A tools to work on suricata stats.log file.☆29Updated 9 years ago
- OpenWRT Suricata package☆50Updated 7 years ago
- An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers☆57Updated this week
- OpenSPA - An open and extensible Single Packet Authorization (SPA) protocol☆98Updated 2 years ago
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆26Updated last year
- SuricataLog is a set of tools/ scripts to parse and display Suricata log files (like /var/log/suricata/eve.json)☆23Updated 2 months ago
- ☆11Updated last week
- calculate flow information from PCAP and extract tcp streams☆70Updated 10 months ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆178Updated 8 months ago
- A curated list of awesome things related to Suricata☆174Updated 3 months ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆71Updated 3 weeks ago
- A Zeek log writer plugin that publishes to Kafka.☆48Updated 5 months ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆186Updated 2 years ago
- Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG App…☆64Updated last month
- Argus clients program repo☆22Updated last week
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆34Updated 5 months ago
- Pure python parser for Snort/Suricata rules.☆32Updated last year