Alternatives and similar repositories for RuleCat:

Users that are interested in RuleCat are comparing it to the libraries listed below

• njcx / Artemis_HIDS
  使用 cgroups + etcd + kafka + netlink-connector 开发而成的hids的架构，agent 部分使用go 开发而成， 会把采集的数据写入到kafka里面，由后端的规则引擎（go开发而成）消费，配置部分以及agent存活使用etcd。
  ☆19Updated 3 years ago
• HXSecurity / DongTai-agent-go
  Go Agent is a go application probe of DongTai IAST, which collects method invocation data during runtime of Go application by dynamic hoo…
  ☆42Updated 3 months ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 5 years ago
• bytedance / Elkeid-HUB
  Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the comm…
  ☆95Updated last year
• grayddq / HIDS
  HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分…
  ☆106Updated 7 years ago
• ainrm / safeGate
  一个基于openresty开发的安全网关demo
  ☆30Updated 3 years ago
• secoba / HFish
  企业安全测试主动攻击型蜜罐钓鱼框架系统
  ☆39Updated 4 years ago
• momosecurity / cornerstone
  Linux命令转发记录
  ☆64Updated 5 years ago
• Onils / psaudit
  通过Linux netlink NETLINK_CONNECTOR 协议实时进行监控本机进程情况。
  ☆13Updated 5 years ago
• netxfly / docker_ssh_honeypot
  安全开发教学 - 用Docker制作一个高交互ssh蜜罐
  ☆69Updated 6 years ago
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆141Updated 5 years ago
• neargle / cloud_native_security_test_case
  🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]
  ☆81Updated 3 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• C4o / FBI-Analyzer
  A Flexible Log Analysis System Based on Golang and Lua-Plugins. 插件化的准实时日志分析系统。
  ☆94Updated 4 years ago
• Sep0lkit / Blog
  Sep0lkit's Blog
  ☆15Updated 5 years ago
• baidu-security / openrasp-v8
  Google V8 with OpenRASP builtins
  ☆57Updated 4 years ago
• 404notf0und / AI-for-Security-Landing
  企业级安全智能化实践
  ☆69Updated 3 years ago
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆51Updated 6 years ago
• njcx / BlackIPS
  开源威胁情报，包含3个组件，2个查询API，1个前端，300万+恶意IP，Go +Redis开发的威胁情报查询API性能良好，恶意IP一直在更新。
  ☆128Updated 2 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆56Updated 4 years ago
• jweny / Distributed_Docker_Openvas
  基于Docker集群的分布式Openvas(GVM)。本项目包括：GVM-Docker镜像，Openvas-Scanner-Docker镜像，GVM远程调度(golang)。
  ☆29Updated 4 years ago
• Abyssal-Fish-Technology / ly_analyser
  ☆28Updated last year
• DSO-Lab / passets
  Passets 是一套开源的被动资产识别框架。
  ☆49Updated 4 years ago
• zj1244 / beholder_scanner
  一款监控端口变化的系统——beholder_scanner端
  ☆84Updated 9 months ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• Qianlitp / WatchAD-Web
  A simple web platform for WatchAD
  ☆110Updated 2 years ago
• PrettyUp / Security-Baseline
  Linux安全基线扫描、报告生成与自动修复程序
  ☆82Updated 6 years ago
• shadow-horse / VulnerabilityAnalysis
  分析验证安全漏洞，仅供学习
  ☆21Updated 4 years ago
• cmcmsec / suricata_open
  ☆12Updated 4 years ago
• Abyssal-Fish-Technology / ly_probe
  ☆23Updated last year