Alternatives and similar repositories for surevego

Users that are interested in surevego are comparing it to the libraries listed below

• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆54Updated 3 months ago
• kung-foo / freki
  Freki is a tool to manipulate packets in usermode using NFQUEUE and golang.
  ☆58Updated 2 years ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆94Updated last year
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆69Updated last year
• satta / gommunityid
  Go implementation of the Community ID flow hashing standard
  ☆20Updated 3 months ago
• 0xrawsec / golang-misp
  Golang Library to interact with your MISP instance
  ☆22Updated 5 years ago
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆106Updated last year
• jonpulsifer / dnsmon-go
  A golang DNS monitor inspired by https://github.com/gamelinux/passivedns
  ☆30Updated 2 months ago
• freetaxii / libstix2
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆53Updated 7 months ago
• ks2211 / go-suricata
  Go Client for Suricata (Interacting via Socket)
  ☆12Updated 4 years ago
• Velocidex / vfilter
  A library implementing a generic SQL like query language.
  ☆21Updated last month
• glaslos / ssdeep
  SSDEEP hash lib in Golang
  ☆109Updated last year
• TcM1911 / stix2
  A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data
  ☆23Updated 3 months ago
• google / gonids
  gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…
  ☆186Updated 2 weeks ago
• rapid7 / godap
  The Data Analysis Pipeline
  ☆17Updated 6 years ago
• zmap / zcrypto
  Liberal Go TLS + X.509 Library for Research
  ☆145Updated last week
• williballenthin / govt
  Virustotal API for Go
  ☆66Updated 6 years ago
• jasonish / dumpy
  A web frontend to libpcap spool directories as produced by tcpdump or daemonlogger.
  ☆27Updated this week
• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 4 years ago
• zond / qisniff
  ☆66Updated 9 years ago
• D4-project / sensor-d4-tls-fingerprinting
  Extract TLS certificates from pcap files or network interfaces, fingerprint TLS client/server interactions with ja3/ja3s
  ☆37Updated 5 years ago
• DCSO / balboa
  server for indexing and querying passive DNS observations
  ☆46Updated 3 weeks ago
• botherder / go-autoruns
  Collect autorun records from running system
  ☆60Updated 3 years ago
• jasonish / go-idsrules
  A Go(lang) IDS rule parser
  ☆13Updated 6 years ago
• MonaxGT / gomalshare
  Go library MalShare API
  ☆12Updated 6 years ago
• go-freebsd / pf
  PF (Packet Filter)
  ☆45Updated 4 years ago
• freetaxii / server
  A cyber threat intelligence server based on TAXII 2 and written in Golang
  ☆30Updated 5 years ago
• Lukasa / gopcap
  Parsing .pcap files for humans.
  ☆35Updated 10 years ago
• DevoInc / sightingdb
  Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen
  ☆16Updated last year
• PowerDNS / ipcipher
  ipcipher is a specification for encrypting IP{v4,v6} addresses 'in place'.
  ☆20Updated 7 years ago