Alternatives and similar repositories for awesome-suricata:

Users that are interested in awesome-suricata are comparing it to the libraries listed below

• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆160Updated last week
• CriticalPathSecurity / Zeek-Intelligence-Feeds
  Zeek-Formatted Threat Intelligence Feeds
  ☆359Updated this week
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆80Updated this week
• SigmaHQ / sigma-cli
  The Sigma command line interface based on pySigma
  ☆151Updated last week
• activecm / rita
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆283Updated this week
• idaholab / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆402Updated 3 weeks ago
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆194Updated last month
• SigmaHQ / sigma-specification
  Sigma rule specification
  ☆132Updated last month
• Cisco-Talos / IOCs
  Indicators of Compromise
  ☆192Updated this week
• CriticalPathSecurity / Public-Intelligence-Feeds
  Standard-Format Threat Intelligence Feeds
  ☆112Updated this week
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆210Updated this week
• TonyPhipps / SIEM
  SIEM Tactics, Techiques, and Procedures
  ☆623Updated this week
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆92Updated 3 years ago
• UncoderIO / Roota
  Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …
  ☆126Updated 9 months ago
• fr0gger / jupyter-collection
  Collection of Jupyter Notebooks by @fr0gger_
  ☆162Updated last month
• center-for-threat-informed-defense / attack-workbench-frontend
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆350Updated last week
• StamusNetworks / suricata-4-analysts
  The Security Analyst’s Guide to Suricata
  ☆55Updated 10 months ago
• mthcht / ThreatHunting-Keywords
  Awesome list of keywords and artifacts for Threat Hunting sessions
  ☆563Updated last month
• tolgadevsec / Awesome-Deception
  An awesome list of resources on deception-based security with honeypots and honeytokens
  ☆172Updated 4 months ago
• mdecrevoisier / SIGMA-detection-rules
  Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques
  ☆357Updated 3 months ago
• mitre-attack / attack-stix-data
  STIX data representing MITRE ATT&CK
  ☆395Updated this week
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆169Updated this week
• nasbench / SIGMA-Resources
  Resources To Learn And Understand SIGMA Rules
  ☆174Updated 2 years ago
• OpenCTI-Platform / docker
  OpenCTI Docker deployment helpers
  ☆182Updated this week
• MISP / misp-docker
  A production ready Dockered MISP
  ☆227Updated last week
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆446Updated this week
• thehappydinoa / awesome-threat-intel-rss
  A curated list of Awesome Threat Intelligence blogs
  ☆60Updated last year
• UncoderIO / Uncoder_IO
  An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.
  ☆150Updated 2 months ago
• TheHive-Project / awesome
  A curated list of awesome things related to TheHive & Cortex
  ☆178Updated 3 years ago
• NUKIB / misp
  Docker image for MISP
  ☆125Updated last month