satta / awesome-suricataLinks
A curated list of awesome things related to Suricata
☆217Updated 2 months ago
Alternatives and similar repositories for awesome-suricata
Users that are interested in awesome-suricata are comparing it to the libraries listed below
Sorting:
- Standard-Format Threat Intelligence Feeds☆126Updated this week
- OpenCTI Docker deployment helpers☆214Updated last week
- Zeek-Formatted Threat Intelligence Feeds☆383Updated this week
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆449Updated last week
- Indicators of Compromise☆247Updated 2 weeks ago
- This project is a SIEM with SIRP and Threat Intel, all in one.☆459Updated last year
- Suricata rules for network anomaly detection☆182Updated 2 months ago
- Sagan is a multi-threads, high performance log analysis engine. At it's core, Sagan similar to Suricata/Snort but with logs rather th…☆191Updated 3 months ago
- SIEM Tactics, Techiques, and Procedures☆691Updated 3 weeks ago
- A curated list of Awesome Threat Intelligence blogs☆97Updated 2 years ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆629Updated 5 months ago
- An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…☆402Updated this week
- ⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident…☆505Updated 2 weeks ago
- Incident Response - Fast suspicious file finder☆248Updated last week
- A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…☆246Updated last week
- A powerful and user-friendly browser extension that streamlines investigations for security professionals.☆415Updated 8 months ago
- A curated list of Awesome Threat Intelligence Blogs☆487Updated last week
- 🏴☠️💰 Another Ransomware gang tracker☆285Updated last week
- OpenCTI Connectors☆512Updated this week
- Docker configurations for TheHive, Cortex and 3rd party tools☆128Updated 3 years ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆169Updated last month
- Open source endpoint agent providing host information to Zeek. [v2]☆90Updated this week
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆94Updated 3 years ago
- Threat Hunting queries for various attacks☆244Updated 2 weeks ago
- An awesome list of resources on deception-based security with honeypots and honeytokens☆180Updated last year
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆504Updated last week
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆213Updated last week
- The Sigma command line interface based on pySigma☆174Updated 3 weeks ago
- The Security Analyst’s Guide to Suricata☆61Updated 9 months ago
- Threat Intel Platform for T-POTs☆162Updated this week