Alternatives and similar repositories for suricata-trafficid.ARCHIVED

Users that are interested in suricata-trafficid.ARCHIVED are comparing it to the libraries listed below

• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆104Updated 4 years ago
• Z-0ne / SCADA-Rules
  Snort rules
  ☆35Updated 6 years ago
• redBorder / daq
  Snort/Suricata DAQ module with DPDK patch
  ☆11Updated last year
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆37Updated last year
• jakewarren / suricata-rule-generator
  Quickly generate suricata rules for IOCs
  ☆29Updated 4 years ago
• 360netlab / whoisdb
  The python client of 360 Netlab whois database
  ☆14Updated 6 years ago
• ozuriexv / SublimeSuricata
  ☆35Updated last year
• shendo / websnort
  Web service for scanning pcaps with snort
  ☆109Updated 6 years ago
• mylamour / Oops-Webshell
  Oops, It's funny to detect a webshell. Temporarily not maintained
  ☆18Updated 7 years ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆101Updated 3 years ago
• pevma / Suricata-Logstash-Templates
  Templates for Kibana/Logstash to use with Suricata IDPS
  ☆80Updated 9 years ago
• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 5 years ago
• jbaggs / anomalous-dns
  A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.
  ☆34Updated 4 months ago
• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 4 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• jvdroit / Suricata-rules
  ☆9Updated 8 years ago
• tnt1200 / passive-dns
  passive dns collector
  ☆10Updated 8 years ago
• rsabir / bro-dsniff
  A dsniff project using bro
  ☆10Updated 9 years ago
• u2400 / libc_hook_demo
  一个HIDS agent端的demo
  ☆17Updated 5 years ago
• Freem93 / grammar_nasl_v2
  ☆16Updated 7 years ago
• staaldraad / fastfluxanalysis
  Scripts to detect Fast-Flux and DGA using DNS query responses
  ☆43Updated 7 years ago
• OISF / suricata-trafficid
  Application and service identification rules for Suricata
  ☆18Updated 2 years ago
• stratosphereips / StratosphereLibSlips
  This is the C version of the StratosphereLinuxIPS. It is mainly used for integration with Snort and other IDSs.
  ☆12Updated 8 years ago
• irtimmer / bro-xdp_packet-plugin
  Plugin providing AF_XDP support for Bro.
  ☆14Updated 4 years ago
• John-Lin / malware
  This is a malware analysis project which expecte to generate snort rule via malicious network traffic
  ☆28Updated 2 years ago
• JustinAzoff / zeek-pdns
  Passive DNS collection using Zeek
  ☆182Updated last year
• vipinpv85 / DPDK-Suricata_3.0
  add dpdk interface and packet processing to suricata in worker mode
  ☆65Updated 4 years ago
• bhdresh / SnortRules
  This is an open source Snort rules repository
  ☆30Updated 3 years ago