klingerko / nids-rule-libraryLinks
Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
☆27Updated last year
Alternatives and similar repositories for nids-rule-library
Users that are interested in nids-rule-library are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆165Updated 3 months ago
- Suricata Verification Tests - Testing Suricata Output☆111Updated this week
- The Security Analyst’s Guide to Suricata☆56Updated 2 months ago
- zeek-scripts☆44Updated 6 years ago
- Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.☆39Updated 5 years ago
- Pure python parser for Snort/Suricata rules.☆33Updated last year
- Suricata rules for the new critical vulnerabilities☆82Updated 4 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆83Updated last week
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆74Updated 3 weeks ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆104Updated 3 years ago
- Mapping NSM rules to MITRE ATT&CK☆71Updated 4 years ago
- Quickly generate suricata rules for IOCs☆29Updated 4 years ago
- Suricata Extreme Performance Tuning guide - Mark II☆117Updated 7 years ago
- The tool for updating your Suricata rules.☆276Updated last week
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆82Updated 2 months ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆155Updated 3 months ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆111Updated last year
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 5 years ago
- OpenWRT Suricata package☆51Updated 7 years ago
- Collection of Suricata rule sets that I use modified to my environments.☆39Updated 4 years ago
- Suricata rule and intel index☆31Updated last week
- Meer is a "spooler" for Suricata / Sagan.☆30Updated 2 years ago
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆179Updated 3 months ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆170Updated 2 years ago
- This is an open source Snort rules repository☆30Updated 3 years ago
- DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic☆42Updated 11 months ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆82Updated 11 months ago
- Plugin providing native AF_Packet support for Zeek.☆34Updated this week
- ☆35Updated last year
- ☆43Updated 2 years ago