Alternatives and similar repositories for suricata-rules:

Users that are interested in suricata-rules are comparing it to the libraries listed below

• Cyb3rWard0g / infosec-well-done
  A few quick recipes for those that do not have much time during the day
  ☆22Updated 4 months ago
• weslambert / securityonion-strelka
  ☆12Updated 5 years ago
• 3CORESec / AWS-Mirror-Toolkit
  A set of tools and procedures for automating NSM and NIDS deployments in AWS
  ☆16Updated 4 years ago
• Securityinbits / cheatsheet
  These are some of the commands which I use frequently during Malware Analysis and DFIR.
  ☆24Updated last year
• olafhartong / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆12Updated 6 years ago
• OTRF / sigma
  Generic Signature Format for SIEM Systems
  ☆14Updated 3 years ago
• theparanoids / rdfp
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆39Updated last year
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 4 years ago
• BreakingMalwareResearch / YetiToElastic
  YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack
  ☆16Updated 4 years ago
• Shuffle / workflows
  Workflows for Shuffle
  ☆21Updated 2 years ago
• robvandenbrink / CVEScan
  List CVEs and details that apply to your infrastructure (pre-inventoried).
  ☆10Updated 4 years ago
• tiburon-security / sriracha-iq
  Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…
  ☆18Updated 4 years ago
• Benster900 / ThreatWaffle
  Threat hunting repo for my independent study on threat hunting with OSQuery
  ☆27Updated 7 years ago
• jafarspalace / Crowdstrike-Falcon-Scripts
  Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation
  ☆22Updated 3 months ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 3 years ago
• ajackal / ir_scripts
  incident response scripts
  ☆19Updated 6 years ago
• invictus-ir / Sigma-AWS
  This repository contains the research and components of our research into using Sigma for AWS Incident Response.
  ☆27Updated last year
• CyCat-project / cycat-service
  CyCAT.org API back-end server including crawlers
  ☆29Updated 2 years ago
• swimlane / CLAW
  A packer utility to create and capture DFIR Image for use AWS & Azure
  ☆15Updated 5 years ago
• 3CORESec / Automata
  Automatic detection engineering technical state compliance
  ☆55Updated 8 months ago
• w8mej / ThreatPlays
  Sharing Threat Hunting runbooks
  ☆25Updated 5 years ago
• bromiley / pollen
  pollen - A command-line tool for interacting with TheHive
  ☆35Updated 5 years ago
• JimmyAstle / Atomic-Parser
  Python parser for Red Canary's Atomic Red Team Yamls
  ☆27Updated 6 years ago
• notx11 / urlScan2Hive
  Triage automation for suspect URLs
  ☆12Updated 5 years ago
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆28Updated last year
• agreenjay / sysmon
  A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data
  ☆39Updated 5 years ago
• olafhartong / detection-sources
  ☆53Updated 6 years ago
• defensivedepth / Pertinax
  Integrating Sysinternals Autoruns’ logs into Security Onion
  ☆31Updated last year
• SentineLabs / log4j_response
  ☆15Updated 3 years ago
• philhagen / timeshift
  A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.
  ☆20Updated 2 years ago