Alternatives and similar repositories for suricata-rules

Users that are interested in suricata-rules are comparing it to the libraries listed below

• Cisco-Talos / Re2Pcap
  ☆59Updated last year
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆97Updated 5 years ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 6 years ago
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆180Updated last month
• baronpan / SysmonHunter
  An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
  ☆204Updated 3 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆108Updated 4 years ago
• tianyulab / ThreatDetectionRules
  威胁检测规则集
  ☆15Updated 6 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 5 years ago
• Elemental-attack / Elemental
  Elemental - An ATT&CK Threat Library
  ☆320Updated 3 years ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆39Updated 2 years ago
• tstillz / webshell-scan
  Simple web shell scanner written in Golang.
  ☆89Updated 6 years ago
• michalpurzynski / zeek-scripts
  zeek-scripts
  ☆45Updated 7 years ago
• digitalbond / Quickdraw-Snort
  Digital Bond's IDS/IPS rules for ICS and ICS protocols.
  ☆150Updated 5 years ago
• pentesteracademy / patoolkit
  PA Toolkit is a collection of traffic analysis plugins focused on security
  ☆435Updated 6 years ago
• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago
• cyware-labs / Threat-Response-Docker
  ☆45Updated 3 years ago
• tatsuiman / malware-traffic-analysis.net
  Download pcap files from http://www.malware-traffic-analysis.net/
  ☆81Updated 7 years ago
• alphaSeclab / awesome-honeypot
  Awesome Honeypot Resource Collection. Including 250+ Honeypot tools, and 350+ posts about Honeypot.
  ☆93Updated 6 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 6 years ago
• jakewarren / suricata-rule-generator
  Quickly generate suricata rules for IOCs
  ☆28Updated 4 years ago
• ozuriexv / SublimeSuricata
  ☆35Updated 2 years ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆97Updated 7 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆36Updated 5 years ago
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆144Updated 6 years ago
• DarkenCode / yara-rules
  Repository of yara rules
  ☆47Updated 10 years ago
• tstillz / webshell-analyzer
  Web shell scanner and analyzer.
  ☆113Updated 2 years ago
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆40Updated 6 years ago
• klingerko / nids-rule-library
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆29Updated 2 years ago
• Truvis / Suricata_Threat-Hunting-Rules
  Collection of Suricata rule sets that I use modified to my environments.
  ☆40Updated 5 years ago