klingerko / nids-rule-libraryLinks
Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
☆29Updated 2 years ago
Alternatives and similar repositories for nids-rule-library
Users that are interested in nids-rule-library are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆174Updated last week
- Suricata Verification Tests - Testing Suricata Output☆115Updated last week
- zeek-scripts☆45Updated 6 years ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆80Updated 2 weeks ago
- Pure python parser for Snort/Suricata rules.☆33Updated last year
- The tool for updating your Suricata rules.☆280Updated last month
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆107Updated 4 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆86Updated this week
- The Security Analyst’s Guide to Suricata☆59Updated 6 months ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆158Updated 7 months ago
- Mapping NSM rules to MITRE ATT&CK☆72Updated 5 years ago
- Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.☆40Updated 5 years ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆91Updated 6 months ago
- Suricata rules for the new critical vulnerabilities☆83Updated 4 years ago
- Suricata rule and intel index☆32Updated last month
- ☆44Updated 2 years ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆171Updated 2 years ago
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 5 years ago
- OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://gi…☆96Updated 4 months ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆502Updated last month
- Collection of Suricata rule sets that I use modified to my environments.☆40Updated 5 years ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆81Updated 2 months ago
- ☆35Updated last year
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆188Updated 3 weeks ago
- DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic☆45Updated last year
- Suricata Extreme Performance Tuning guide - Mark II☆120Updated 7 years ago
- Repository of creating different example suricata data sets☆36Updated 6 years ago
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆36Updated 9 months ago
- Quickly generate suricata rules for IOCs☆28Updated 4 years ago
- Download pcap files from http://www.malware-traffic-analysis.net/☆79Updated 7 years ago