Alternatives and similar repositories for RuleCat:

Users that are interested in RuleCat are comparing it to the libraries listed below

• njcx / Artemis_HIDS
  使用 cgroups + etcd + kafka + netlink-connector 开发而成的hids的架构，agent 部分使用go 开发而成， 会把采集的数据写入到kafka里面，由后端的规则引擎（go开发而成）消费，配置部分以及agent存活使用etcd。
  ☆19Updated 3 years ago
• HXSecurity / DongTai-agent-go
  Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hoo…
  ☆42Updated 3 months ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• grayddq / HIDS
  HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分…
  ☆106Updated 7 years ago
• netxfly / docker_ssh_honeypot
  安全开发教学 - 用Docker制作一个高交互ssh蜜罐
  ☆69Updated 6 years ago
• Qianlitp / WatchAD-Web
  A simple web platform for WatchAD
  ☆110Updated last year
• secoba / HFish
  企业安全测试主动攻击型蜜罐钓鱼框架系统
  ☆39Updated 4 years ago
• C4o / FBI-Analyzer
  A Flexible Log Analysis System Based on Golang and Lua-Plugins. 插件化的准实时日志分析系统。
  ☆94Updated 4 years ago
• bytedance / Elkeid-HUB
  Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the comm…
  ☆94Updated last year
• Onils / psaudit
  通过Linux netlink NETLINK_CONNECTOR 协议实时进行监控本机进程情况。
  ☆13Updated 5 years ago
• ttl255 / network_protocol_pcap
  IDS协议识别测试流量
  ☆22Updated 6 years ago
• momosecurity / cornerstone
  Linux命令转发记录
  ☆64Updated 5 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• ainrm / safeGate
  一个基于openresty开发的安全网关demo
  ☆30Updated 3 years ago
• 404notf0und / AI-for-Security-Landing
  企业级安全智能化实践
  ☆69Updated 3 years ago
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆51Updated 6 years ago
• njcx / BlackIPS
  开源威胁情报，包含3个组件，2个查询API，1个前端，300万+恶意IP，Go +Redis开发的威胁情报查询API性能良好，恶意IP一直在更新。
  ☆128Updated 2 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• zbnio / zbn
  安全编排与自动化响应平台
  ☆60Updated 4 years ago
• oasiszrz / XAIGen
  ☆82Updated 4 years ago
• neargle / cloud_native_security_test_case
  🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]
  ☆80Updated 3 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆56Updated 4 years ago
• DSO-Lab / passets
  Passets 是一套开源的被动资产识别框架。
  ☆49Updated 4 years ago
• Kutim / docker-security
  docker 安全基线规范
  ☆90Updated 6 years ago
• yingshang / banruo
  ☆146Updated 3 years ago
• shadow-horse / VulnerabilityAnalysis
  分析验证安全漏洞，仅供学习
  ☆21Updated 4 years ago
• Lucifer1993 / PoCHub
  PoC，attack，scan，redteam，vulnerable-manage
  ☆79Updated last year
• zj1244 / beholder_scanner
  一款监控端口变化的系统——beholder_scanner端
  ☆84Updated 9 months ago
• chaitin / libveinmind
  一个由长亭自研，直观而可扩展的容器安全 SDK
  ☆121Updated last year
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆141Updated 5 years ago