klingerko / nids-rule-libraryLinks
Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
☆28Updated 2 years ago
Alternatives and similar repositories for nids-rule-library
Users that are interested in nids-rule-library are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆173Updated 5 months ago
- Suricata Verification Tests - Testing Suricata Output☆114Updated last week
- Open source endpoint agent providing host information to Zeek. [v2]☆86Updated last month
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆88Updated 5 months ago
- zeek-scripts☆45Updated 6 years ago
- The Security Analyst’s Guide to Suricata☆59Updated 5 months ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆79Updated 3 months ago
- Pure python parser for Snort/Suricata rules.☆33Updated last year
- Suricata rule and intel index☆32Updated 3 weeks ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆158Updated 6 months ago
- The tool for updating your Suricata rules.☆280Updated last week
- Suricata rules for the new critical vulnerabilities☆83Updated 4 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆107Updated 4 years ago
- Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.☆40Updated 5 years ago
- Collection of Suricata rule sets that I use modified to my environments.☆40Updated 5 years ago
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆188Updated this week
- Mapping NSM rules to MITRE ATT&CK☆72Updated 5 years ago
- ☆43Updated 2 years ago
- OpenWRT Suricata package☆54Updated 7 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆119Updated 7 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 5 years ago
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆36Updated 9 months ago
- DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic☆45Updated last year
- Zeek IDS Dockerfile☆101Updated 2 years ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆81Updated 2 months ago
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆94Updated last year
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆37Updated 3 years ago
- Download pcap files from http://www.malware-traffic-analysis.net/☆79Updated 7 years ago