Alternatives and similar repositories for suricata-rules:

Users that are interested in suricata-rules are comparing it to the libraries listed below

• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆156Updated this week
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆99Updated 3 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 5 years ago
• cyware-labs / Threat-Response-Docker
  ☆41Updated 2 years ago
• baronpan / SysmonHunter
  An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal
  ☆201Updated 2 years ago
• Cisco-Talos / Re2Pcap
  ☆54Updated 8 months ago
• xisafe / suricata-rule
  suricata IDS的规则，测试在用的，部分自写的规则视情况放出。
  ☆18Updated 5 years ago
• klingerko / nids-rule-library
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆23Updated last year
• michalpurzynski / zeek-scripts
  zeek-scripts
  ☆44Updated 6 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆69Updated 4 years ago
• bhdresh / SnortRules
  This is an open source Snort rules repository
  ☆30Updated 2 years ago
• tatsuiman / malware-traffic-analysis.net
  Download pcap files from http://www.malware-traffic-analysis.net/
  ☆75Updated 7 years ago
• AlkenePan / awesome-bro
  Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
  ☆31Updated 4 years ago
• Truvis / Suricata_Threat-Hunting-Rules
  Collection of Suricata rule sets that I use modified to my environments.
  ☆39Updated 4 years ago
• AlienVault-OTX / OTX-Suricata
  The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX accou…
  ☆109Updated 10 months ago
• DarkenCode / yara-rules
  Repository of yara rules
  ☆45Updated 9 years ago
• RedDrip7 / Log4Shell_CVE-2021-44228_related_attacks_IOCs
  ☆45Updated 3 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆80Updated 5 months ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆16Updated 5 years ago
• Elemental-attack / Elemental
  Elemental - An ATT&CK Threat Library
  ☆318Updated 2 years ago
• aau-network-security / riotpot
  IoT and Operational Technology Honeypot
  ☆105Updated last year
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆39Updated 5 years ago
• blacktop / docker-zeek
  Zeek IDS Dockerfile
  ☆101Updated 2 years ago
• arvindpj007 / Suricata-Detect-DoS-Attack
  Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.
  ☆39Updated 4 years ago
• tstillz / webshell-scan
  Simple web shell scanner written in Golang.
  ☆89Updated 5 years ago
• RF-CTI / SANS-summit
  ☆30Updated last year
• digitalbond / Quickdraw-Snort
  Digital Bond's IDS/IPS rules for ICS and ICS protocols.
  ☆144Updated 4 years ago
• ozuriexv / SublimeSuricata
  ☆35Updated last year
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆113Updated 7 years ago