sudohyak / suricata-rules
Suricata rules for the new critical vulnerabilities
☆79Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for suricata-rules
- This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)☆98Updated 3 years ago
- Suricata rules for network anomaly detection☆153Updated 2 months ago
- Explore Indicators of Compromise Automatically☆94Updated 4 years ago
- ☆54Updated 4 months ago
- zeek-scripts☆41Updated 5 years ago
- An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal☆202Updated 2 years ago
- Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))☆31Updated 4 years ago
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆20Updated last year
- ☆35Updated 11 months ago
- 威胁检测规则集☆15Updated 5 years ago
- Elemental - An ATT&CK Threat Library☆314Updated last year
- suricata IDS的规则，测试在用的，部分自写的规则视情况放出。☆18Updated 5 years ago
- Mapping NSM rules to MITRE ATT&CK☆68Updated 4 years ago
- Code and yara rules to detect and analyze Cobalt Strike☆263Updated 3 years ago
- Download pcap files from http://www.malware-traffic-analysis.net/☆73Updated 6 years ago
- Collection of Suricata rule sets that I use modified to my environments.☆38Updated 4 years ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆46Updated last year
- Repository of yara rules☆45Updated 9 years ago
- This is an open source Snort rules repository☆30Updated 2 years ago
- Simple web shell scanner written in Golang.☆87Updated 5 years ago
- ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…☆39Updated 4 years ago
- The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…☆106Updated 6 months ago
- 《横向移动攻击与检测技术》专栏文章☆16Updated 5 years ago
- CVE2020-0796 SMBv3 RCE☆61Updated 4 years ago
- ☆45Updated 2 years ago
- Ripple20 Critical Vulnerabilities - Detection Logic and Signatures☆11Updated 3 years ago
- Zeek IDS Dockerfile☆99Updated last year
- How to Zeek Sysmon Logs!☆100Updated 2 years ago
- ☆39Updated 11 months ago
- 天御攻防实验室 - 威胁猎杀实战系列☆102Updated 5 years ago