Alternatives and similar repositories for pulledpork

Users that are interested in pulledpork are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆354Updated last year
• bammv / sguil
  Sguil client for NSM
  ☆222Updated last year
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆475Updated 2 weeks ago
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆669Updated 3 months ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆456Updated 2 years ago
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆416Updated 2 years ago
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆283Updated 5 months ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆214Updated 7 years ago
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆945Updated 4 years ago
• mushorg / snare
  Super Next generation Advanced Reactive honEypot
  ☆474Updated last year
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 6 years ago
• mushorg / glastopf
  Web Application Honeypot
  ☆594Updated last year
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆284Updated last month
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆169Updated 4 years ago
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆508Updated last week
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Updated 7 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆495Updated last year
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆229Updated 4 years ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆659Updated 6 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆508Updated 3 years ago
• mandiant / iocs
  FireEye Publicly Shared Indicators of Compromise (IOCs)
  ☆471Updated 6 years ago
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆434Updated last year
• salesforce / hassh
  HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…
  ☆543Updated 7 months ago
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆474Updated last year
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• brendangregg / Chaosreader
  An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data
  ☆234Updated 4 years ago
• ossec / ossec-docs
  OSSEC Documentation
  ☆138Updated 10 months ago
• Cisco-Talos / snort-faq
  Snort FAQ
  ☆117Updated 4 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆249Updated last year
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆818Updated 5 years ago