Alternatives and similar repositories for pulledpork

Users that are interested in pulledpork are comparing it to the libraries listed below

• firnsy / barnyard2
  Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
  ☆353Updated last year
• StamusNetworks / scirius
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆651Updated 2 weeks ago
• rocknsm / rock
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆453Updated last year
• jasonish / evebox
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆458Updated last week
• bammv / sguil
  Sguil client for NSM
  ☆218Updated last year
• jasonish / py-idstools
  idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
  ☆281Updated last year
• mrash / psad
  psad: Intrusion Detection and Log Analysis with iptables
  ☆401Updated last year
• StamusNetworks / SELKS
  A Suricata based IDS/IPS/NSM distro
  ☆1,536Updated 9 months ago
• OISF / suricata-update
  The tool for updating your Suricata rules.
  ☆271Updated last month
• foospidy / HoneyPy
  A low to medium interaction honeypot.
  ☆468Updated last year
• secureworks / dalton
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆478Updated last week
• toolswatch / vFeed
  The Correlated CVE Vulnerability And Threat Intelligence Database API
  ☆943Updated 4 years ago
• pevma / SEPTun
  Suricata Extreme Performance Tuning guide
  ☆209Updated 7 years ago
• joanbono / Snorter
  Snort + Barnyard2 + Pulledpork → The easy way!
  ☆167Updated 4 years ago
• secureworks / flowsynth
  a network packet capture compiler
  ☆199Updated 3 years ago
• wazuh / wazuh-ruleset
  Wazuh - Ruleset
  ☆448Updated 8 months ago
• beave / sagan
  ** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
  ☆228Updated 4 years ago
• lmco / laikaboss
  Laika BOSS: Object Scanning System
  ☆745Updated 5 months ago
• mlsecproject / combine
  Tool to gather Threat Intelligence indicators from publicly available sources
  ☆660Updated 6 years ago
• jeffbryner / MozDef
  MozDef: The Mozilla Defense Platform
  ☆68Updated 5 years ago
• bfuzzy / auditd-attack
  A Linux Auditd rule set mapped to MITRE's Attack Framework
  ☆792Updated 4 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆238Updated last year
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,696Updated last year
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• secureworks / dcept
  A tool for deploying and detecting use of Active Directory honeytokens
  ☆507Updated 2 years ago
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆1,043Updated last week
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆430Updated last year
• mitre / multiscanner
  Modular file scanning/analysis framework
  ☆618Updated 5 years ago
• int13h / squert
  A Simple QUEry and Report Tool
  ☆142Updated 5 years ago
• TravisFSmith / SweetSecurity
  Network Security Monitoring on Raspberry Pi type devices
  ☆789Updated 7 years ago