Alternatives and similar repositories for awesome-suricata

Users that are interested in awesome-suricata are comparing it to the libraries listed below

• klingerko / nids-rule-library

  View on GitHub
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆29Jul 24, 2023Updated 2 years ago
• StamusNetworks / suricata-language-server

  View on GitHub
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆84Feb 8, 2026Updated last week
• StamusNetworks / suricata-4-analysts

  View on GitHub
  The Security Analyst’s Guide to Suricata
  ☆61Apr 28, 2025Updated 9 months ago
• COSSAS / sacti

  View on GitHub
  SACTI - Securely aggregate CTI sightings and report them on MISP
  ☆14Oct 24, 2022Updated 3 years ago
• Karneades / awesome-malware-persistence

  View on GitHub
  A curated list of awesome malware persistence tools and resources.
  ☆270Oct 3, 2025Updated 4 months ago
• DCSO / fever

  View on GitHub
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆57Nov 20, 2025Updated 2 months ago
• StamusNetworks / suricata-analytics

  View on GitHub
  ☆38Nov 20, 2025Updated 2 months ago
• Karneades / awesome-security-card-games

  View on GitHub
  A curated list of security card games.
  ☆156Jun 2, 2025Updated 8 months ago
• quadrantsec / meer

  View on GitHub
  Meer is a "spooler" for Suricata / Sagan.
  ☆30Jun 21, 2023Updated 2 years ago
• sidallocation / sidallocation.org

  View on GitHub
  ☆15Feb 21, 2025Updated 11 months ago
• sebdraven / IOCmite

  View on GitHub
  Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
  ☆36Nov 9, 2022Updated 3 years ago
• Center-Sun / suricata-kafka-output

  View on GitHub
  provides a Suricata Eve output for Kafka with Suricate Eve plugin
  ☆15Nov 25, 2021Updated 4 years ago
• jasonish / suricata-example-plugins

  View on GitHub
  ☆14Aug 1, 2025Updated 6 months ago
• DevoInc / sightingdb

  View on GitHub
  Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen
  ☆17Apr 11, 2024Updated last year
• travisbgreen / hunting-rules

  View on GitHub
  Suricata rules for network anomaly detection
  ☆184Feb 7, 2026Updated last week
• hashlookup / private-search-set

  View on GitHub
  Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.
  ☆16Jan 10, 2025Updated last year
• jasonish / suricatax-rule-parser-rs

  View on GitHub
  ☆11Nov 26, 2025Updated 2 months ago
• OISF / suricata-intel-index

  View on GitHub
  Suricata rule and intel index
  ☆33Jan 13, 2026Updated last month
• usualsuspect / yara_vt_mock

  View on GitHub
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆25May 29, 2023Updated 2 years ago
• OISF / suricata-update

  View on GitHub
  The tool for updating your Suricata rules.
  ☆289Oct 31, 2025Updated 3 months ago
• jasonish / evebox

  View on GitHub
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆482Jan 22, 2026Updated 3 weeks ago
• cudeso / misp-reporting

  View on GitHub
  A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…
  ☆11Aug 14, 2025Updated 6 months ago
• spwpun / ntp-4.2.8p15-cves

  View on GitHub
  5 cves of ntp 4.2.8p15 founded by me.
  ☆12Apr 11, 2023Updated 2 years ago
• eCrimeLabs / cratos-fastapi

  View on GitHub
  The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…
  ☆13Sep 21, 2025Updated 4 months ago
• cisagov / flare-misp-service

  View on GitHub
  Automate the regular transfer of AIS data into a MISP Server
  ☆10Jun 5, 2024Updated last year
• MISP / misp-stix

  View on GitHub
  MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats
  ☆56Feb 4, 2026Updated last week
• corelight / threat-hunting-guide

  View on GitHub
  ☆58Mar 4, 2022Updated 3 years ago
• adulau / napkin-text-analysis

  View on GitHub
  Napkin is a simple tool to produce statistical analysis of a text
  ☆12Feb 25, 2024Updated last year
• DCSO / Blog_CyTec

  View on GitHub
  Repository to provide files related to our blog articles.
  ☆16May 26, 2025Updated 8 months ago
• dgenzer / suricata-highlight-vscode

  View on GitHub
  Syntax highlighting for suricata rules
  ☆12Feb 26, 2022Updated 3 years ago
• JustinAzoff / gotm

  View on GitHub
  Full packet capture with flow cutoff, rotation, and compression
  ☆15Sep 18, 2018Updated 7 years ago
• 0x00000013 / huakiwi

  View on GitHub
  eBPF-based EDR for Linux
  ☆18Aug 25, 2024Updated last year
• eozer / awesome-snmp

  View on GitHub
  A curated list of awesome SNMP libraries, tools, and other resources.
  ☆179Updated this week
• pevma / SEPTun-Mark-II

  View on GitHub
  Suricata Extreme Performance Tuning guide - Mark II
  ☆121Apr 17, 2018Updated 7 years ago
• 0xrawsec / gene-rules

  View on GitHub
  ☆42Sep 16, 2022Updated 3 years ago
• StamusNetworks / Clear-NDR-ISO

  View on GitHub
  A Suricata based NDR distribution
  ☆1,590Sep 13, 2025Updated 5 months ago
• Joe-B-Security / awesome-prompt-injection

  View on GitHub
  Learn about a type of vulnerability that specifically targets machine learning models
  ☆406Sep 14, 2025Updated 5 months ago
• infosecB / awesome-detection-engineering

  View on GitHub
  Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation o…
  ☆1,126Dec 19, 2025Updated last month
• CyCat-project / cycat-service

  View on GitHub
  CyCAT.org API back-end server including crawlers
  ☆29Feb 4, 2023Updated 3 years ago