mrdraper / Packet2Snort
A Python script that generates Snort IDS rules from network packets
☆25Updated 7 years ago
Alternatives and similar repositories for Packet2Snort:
Users that are interested in Packet2Snort are comparing it to the libraries listed below
- Data sets and examples for Jask Labs Blackhat 2017 Handout: Top 10 Machine Learning Cyber Security Use Cases☆31Updated 7 years ago
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆99Updated 3 years ago
- A tool to generate Snort rules based on public IP reputation data☆56Updated 11 years ago
- Evading Snort Intrusion Detection System.☆76Updated 3 years ago
- Mapping NSM rules to MITRE ATT&CK☆68Updated 4 years ago
- The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …☆50Updated 6 years ago
- Extract files from network traffic with Zeek.☆99Updated 4 years ago
- A web-based tool to assist the work of the intuitive threat analysts.☆112Updated 5 years ago
- Download pcap files from http://www.malware-traffic-analysis.net/☆73Updated 7 years ago
- A collection of resources for security data☆40Updated 7 years ago
- Web service for scanning pcaps with snort☆108Updated 6 years ago
- This is an open source Snort rules repository☆30Updated 2 years ago
- Detect cryptocurrency mining traffic with Zeek.☆46Updated 3 years ago
- This is a malware analysis project which expecte to generate snort rule via malicious network traffic☆27Updated last year
- Snorpy is a python script the gives a Gui interface to help those new to snort create rules.☆60Updated 5 months ago
- A series of labs that will help users apply various data science techniques to security related data.☆132Updated 9 years ago
- A set of ICS IDS rules for use with Suricata.☆49Updated last year
- A completely automated anomaly detector Zeek network flows files (conn.log).☆75Updated 5 months ago
- Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc…☆80Updated 8 years ago
- TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…☆149Updated 7 months ago
- Wireshark plugin to display Suricata analysis info☆93Updated 3 years ago
- Maltese - Malware Traffic Emulator☆26Updated 7 years ago
- IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to sear…☆64Updated 3 years ago
- zeek-scripts☆43Updated 6 years ago
- Top DNS Measurement for Bro☆11Updated 4 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- An anomaly-based intrusion detection system.☆82Updated 2 years ago
- Python API for the CVSS v3☆58Updated 3 years ago
- Ready to run scripts for network analysis☆87Updated 4 months ago