Alternatives and similar repositories for RuleCat

Users that are interested in RuleCat are comparing it to the libraries listed below

• njcx / Artemis_HIDS
  使用 cgroups + etcd + kafka + netlink-connector 开发而成的hids的架构，agent 部分使用go 开发而成， 会把采集的数据写入到kafka里面，由后端的规则引擎（go开发而成）消费，配置部分以及agent存活使用etcd。
  ☆19Updated 3 years ago
• HXSecurity / DongTai-agent-go
  Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hoo…
  ☆42Updated 5 months ago
• Onils / psaudit
  通过Linux netlink NETLINK_CONNECTOR 协议实时进行监控本机进程情况。
  ☆13Updated 5 years ago
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆141Updated 5 years ago
• bytedance / Elkeid-HUB
  Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the comm…
  ☆95Updated 2 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• grayddq / HIDS
  HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分…
  ☆106Updated 7 years ago
• Qianlitp / WatchAD-Web
  A simple web platform for WatchAD
  ☆109Updated 2 years ago
• C4o / FBI-Analyzer
  A Flexible Log Analysis System Based on Golang and Lua-Plugins. 插件化的准实时日志分析系统。
  ☆94Updated 4 years ago
• Abyssal-Fish-Technology / ly_probe
  ☆24Updated last year
• ttl255 / network_protocol_pcap
  IDS协议识别测试流量
  ☆22Updated 6 years ago
• momosecurity / cornerstone
  Linux命令转发记录
  ☆64Updated 5 years ago
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆51Updated 6 years ago
• ainrm / safeGate
  一个基于openresty开发的安全网关demo
  ☆30Updated 3 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• neargle / cloud_native_security_test_case
  🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]
  ☆82Updated 3 years ago
• SecurityPaper / thai_bone
  数据库敏感信息扫描
  ☆11Updated 4 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆57Updated 4 years ago
• secoba / HFish
  企业安全测试主动攻击型蜜罐钓鱼框架系统
  ☆39Updated 4 years ago
• njcx / BlackIPS
  开源威胁情报，包含3个组件，2个查询API，1个前端，300万+恶意IP，Go +Redis开发的威胁情报查询API性能良好，恶意IP一直在更新。
  ☆128Updated 2 years ago
• oasiszrz / XAIGen
  ☆83Updated 4 years ago
• Abyssal-Fish-Technology / ly_analyser
  ☆29Updated last year
• Kutim / docker-security
  docker 安全基线规范
  ☆90Updated 6 years ago
• dean2021 / noodles
  Noodles(面条)是一款超轻量级分布式任务调度类库(太轻量级了,谈不上框架),类似于python的celery,大量参考benmanns的goworker.
  ☆8Updated 6 years ago
• zbnio / zbn
  安全编排与自动化响应平台
  ☆62Updated 4 years ago
• DSO-Lab / passets
  Passets 是一套开源的被动资产识别框架。
  ☆49Updated 4 years ago
• jweny / Distributed_Docker_Openvas
  基于Docker集群的分布式Openvas(GVM)。本项目包括：GVM-Docker镜像，Openvas-Scanner-Docker镜像，GVM远程调度(golang)。
  ☆29Updated 4 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• shadow-horse / VulnerabilityAnalysis
  分析验证安全漏洞，仅供学习
  ☆21Updated 5 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago