Example Suricata rules implementing some of my detection tactics
☆22Jan 13, 2023Updated 3 years ago
Alternatives and similar repositories for suricata-rules
Users that are interested in suricata-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Quickly generate suricata rules for IOCs☆28Apr 30, 2021Updated 5 years ago
- A Yara Lua output script for Suricata☆21Apr 7, 2019Updated 7 years ago
- Suricata rules to detect Winnti communication☆16Mar 5, 2018Updated 8 years ago
- Queries for parsed spotlight database in sqlite☆13Dec 29, 2020Updated 5 years ago
- Splunk Technology Add-On for pfsense☆11Mar 30, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A Python, Boto3 script that leverages a forensic volume to attach & mount to a selected instance, run a memory dump, unmount and detach f…☆12Jul 15, 2020Updated 6 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Mass Suricata rules creator, from a list of domain☆14Sep 14, 2018Updated 8 years ago
- OSConfig☆16Jun 27, 2019Updated 7 years ago
- Reviews and tests of security products☆17Dec 28, 2024Updated last year
- ☆23Aug 1, 2020Updated 6 years ago
- ☆11Feb 21, 2016Updated 10 years ago
- A PowerShell module to manage Windows shortcuts (LNK and URL files)☆19Jul 5, 2019Updated 7 years ago
- Ansible role to set up dns in Debian-like systems☆10Aug 19, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kibana 6 Templates for Suricata IDPS Threat Hunting☆24Mar 5, 2019Updated 7 years ago
- Zeek network security monitor plugin that enables parsing of the BACnet standard building controls protocol☆31Apr 23, 2025Updated last year
- ☆23Dec 15, 2022Updated 3 years ago
- Log4Shell IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake☆18Nov 25, 2022Updated 3 years ago
- A simple script to be used as AuthorizedKeysCommand in OpenSSH server to look up user’s public keys in LDAP.☆15Dec 28, 2016Updated 9 years ago
- Powershell tools to manage an manipulate STIGs, SCAP scans, XCCDFs, and CLKs☆14Nov 6, 2023Updated 2 years ago
- Web-based BGInfo built on Universal Dashboard☆20Feb 14, 2019Updated 7 years ago
- Repository for my ATT&CK analysis research.☆70May 16, 2019Updated 7 years ago
- UAVCAN is a lightweight protocol designed for reliable communication in aerospace and robotic applications via CAN bus.☆13Oct 16, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Applies DISA STIGS GPO Policy's offline☆21Jul 30, 2019Updated 7 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Files to support the setup of this TA in a CIM compliant fashion.☆18Sep 28, 2023Updated 2 years ago
- ☆17Nov 12, 2017Updated 8 years ago
- This repository contains all the talk materials and ebook from the talk System Hardening Using Ansible given at All Day DevOps 2016 onlin…☆12Nov 16, 2016Updated 9 years ago
- A user-mode network ("slirp") CNI plugin - container networking for unprivileged users☆18Nov 17, 2018Updated 7 years ago
- PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Pac…☆93Jun 3, 2021Updated 5 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Assorted scripts for Bro☆12Feb 8, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Module for interact with ADMX and ADML files.☆21Oct 12, 2020Updated 5 years ago
- A PostgreSQL extension for collecting statistics about sorts, helping tuning work_mem☆13Jan 14, 2023Updated 3 years ago
- Snorpy is a python script the gives a Gui interface to help those new to snort create rules.☆68Aug 19, 2024Updated 2 years ago
- Stuff for OSCP☆14Jun 21, 2018Updated 8 years ago
- uftp☆16Jan 31, 2016Updated 10 years ago
- PostgreSQL extension for recoding workload of specific database☆12Mar 21, 2016Updated 10 years ago
- ☆13Oct 11, 2020Updated 5 years ago