m-chrome / py-suricataparserLinks
Pure python parser for Snort/Suricata rules.
☆33Updated last year
Alternatives and similar repositories for py-suricataparser
Users that are interested in py-suricataparser are comparing it to the libraries listed below
Sorting:
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆84Updated last week
- Suricata rule and intel index☆33Updated last month
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆29Updated 2 years ago
- pyJARM is a library for doing JARM fingerprinting using python☆50Updated 9 months ago
- ☆42Updated 3 years ago
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆160Updated 9 months ago
- The Security Analyst’s Guide to Suricata☆61Updated 8 months ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆92Updated 8 months ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆40Updated 11 months ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆49Updated 2 years ago
- YAIDS - Yara-Based IDS - Yara as an Intrusion Detection System / Yet Another Intrusion Detection System - An Intrusion Detection System (…☆26Updated 3 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆38Updated 3 years ago
- ☆15Updated last year
- zeek-scripts☆45Updated 7 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Updated 3 years ago
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆31Updated last year
- Threat Mapping Catalogue☆18Updated 4 years ago
- Tracking APT IOCs☆25Updated 5 years ago
- Suricata Verification Tests - Testing Suricata Output☆117Updated last week
- Look into EDR events from network☆25Updated last month
- This repository contains generated contextual data utilized by pyattck.☆19Updated 9 months ago
- Lightweight Python-Based Malware Analysis Pipeline☆36Updated 3 weeks ago
- ☆45Updated 3 years ago
- Open source endpoint agent providing host information to Zeek. [v2]☆90Updated last month
- Parse YARA rules and operate over them more easily.☆194Updated 10 months ago
- ☆12Updated 4 years ago
- ☆19Updated last year
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆29Updated 5 years ago
- A MITRE Caldera plugin☆49Updated 2 months ago
- YaraScanner is a file pattern-matching tool based on YARA rules.☆59Updated 2 years ago