Example Suricata rules implementing some of my detection tactics
☆22Jan 13, 2023Updated 3 years ago
Alternatives and similar repositories for suricata-rules
Users that are interested in suricata-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Yara Lua output script for Suricata☆21Apr 7, 2019Updated 7 years ago
- Suricata rules for network anomaly detection☆184May 7, 2026Updated 5 months ago
- Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260☆19Nov 28, 2019Updated 6 years ago
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- Suricata rules for SCADA☆16Jun 4, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Splunk Technology Add-On for pfsense☆11Mar 30, 2022Updated 4 years ago
- A Python, Boto3 script that leverages a forensic volume to attach & mount to a selected instance, run a memory dump, unmount and detach f…☆12Jul 15, 2020Updated 6 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Mass Suricata rules creator, from a list of domain☆14Sep 14, 2018Updated 8 years ago
- Reviews and tests of security products☆17Dec 28, 2024Updated last year
- Wireshark plugin to display Suricata analysis info☆92Nov 5, 2021Updated 4 years ago
- AWS lambda function to ship ELB, S3, CloudTrail, VPC, CloudFront logs to Logmatic.io☆12Mar 5, 2018Updated 8 years ago
- Tor Web Scraper, dnmap CnC, and Forensic Disk Analyzer☆17May 25, 2017Updated 9 years ago
- A PowerShell module to manage Windows shortcuts (LNK and URL files)☆19Jul 5, 2019Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Top DNS Measurement for Bro☆10Aug 22, 2020Updated 6 years ago
- Ansible role to set up dns in Debian-like systems☆10Aug 19, 2026Updated last month
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Mar 5, 2019Updated 7 years ago
- SYARA: Super YARA Rules for GenAI Era☆20Mar 5, 2026Updated 7 months ago
- ☆10Feb 25, 2021Updated 5 years ago
- PowerShell module for Jira☆17Apr 18, 2019Updated 7 years ago
- Collection of terraform modules☆12May 8, 2021Updated 5 years ago
- A simple script to be used as AuthorizedKeysCommand in OpenSSH server to look up user’s public keys in LDAP.☆15Dec 28, 2016Updated 9 years ago
- Web-based BGInfo built on Universal Dashboard☆20Feb 14, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Files to support the setup of this TA in a CIM compliant fashion.☆18Sep 28, 2023Updated 3 years ago
- PowerShell version of Fail2Ban☆14Oct 10, 2019Updated 7 years ago
- Collection of Suricata rule sets that I use modified to my environments.☆38Sep 13, 2020Updated 6 years ago
- ☆17Nov 12, 2017Updated 8 years ago
- Suricata Verification Tests - Testing Suricata Output☆125Updated this week
- Burp extension to automatically drop requests that match a certain regex.☆10Mar 10, 2023Updated 3 years ago
- Assorted scripts for Bro☆12Feb 8, 2016Updated 10 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Adept is a simple way to run commands & deploy apps on multiple servers using shell & SSH.☆15Mar 3, 2017Updated 9 years ago
- Module for interact with ADMX and ADML files.☆21Oct 12, 2020Updated 5 years ago
- A fully functional terminal in the browser using xterm-js on the frontend and django & python-socketio on the backend.☆21Aug 21, 2023Updated 3 years ago
- simple node script in nodejs to invalidate cloudfront cache☆13Jun 16, 2016Updated 10 years ago
- ☆18Mar 15, 2026Updated 6 months ago
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆35Jan 4, 2025Updated last year
- Snorpy is a python script the gives a Gui interface to help those new to snort create rules.☆68Aug 19, 2024Updated 2 years ago