m-chrome / py-suricataparserLinks
Pure python parser for Snort/Suricata rules.
☆33Updated last year
Alternatives and similar repositories for py-suricataparser
Users that are interested in py-suricataparser are comparing it to the libraries listed below
Sorting:
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆81Updated this week
- DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic☆45Updated last year
- pyJARM is a library for doing JARM fingerprinting using python☆50Updated 7 months ago
- Suricata rule and intel index☆33Updated 2 weeks ago
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆29Updated 2 years ago
- A HIDS (host-based intrusion detection system) for verifying the integrity of a system.☆59Updated 3 weeks ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆159Updated 7 months ago
- Open source endpoint agent providing host information to Zeek. [v2]☆88Updated 3 weeks ago
- Suricata Verification Tests - Testing Suricata Output☆115Updated this week
- YAIDS - Yara-Based IDS - Yara as an Intrusion Detection System / Yet Another Intrusion Detection System - An Intrusion Detection System (…☆26Updated 3 years ago
- A Self-Contained Open-Source Cyberattack Experimentation Testbed☆43Updated 5 months ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆37Updated 3 years ago
- The Security Analyst’s Guide to Suricata☆60Updated 6 months ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)☆76Updated last month
- YaraScanner is a file pattern-matching tool based on YARA rules.☆59Updated 2 years ago
- ☆44Updated 2 years ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆91Updated 6 months ago
- zeek-scripts☆45Updated 6 years ago
- The project will serve as a central repository for VMware Threat Analysis Unit (TAU) to share threat intelligence with the security commu…☆17Updated 2 years ago
- All necessary code in order to feed Sysmon data into Recurrent Neural Network☆17Updated 5 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆40Updated 9 months ago
- ☆42Updated 3 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆143Updated 2 months ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated 2 years ago
- Mapping NSM rules to MITRE ATT&CK☆72Updated 5 years ago
- Look into EDR events from network☆23Updated this week
- Lightweight Python-Based Malware Analysis Pipeline☆36Updated 2 months ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆82Updated 3 months ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆69Updated last year
- Scripts to detect Fast-Flux and DGA using DNS query responses☆44Updated 8 years ago