theY4Kman / suricata-prettifierLinks
Command-line tool to format and syntax highlight Suricata rules
☆13Updated 5 years ago
Alternatives and similar repositories for suricata-prettifier
Users that are interested in suricata-prettifier are comparing it to the libraries listed below
Sorting:
- 🌴 The STIX2 Pattern expression parser for humans☆26Updated 6 years ago
- snake-core - the real snake☆15Updated 2 years ago
- Parse Suricata rules☆13Updated 2 years ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆21Updated 3 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 6 years ago
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆33Updated this week
- Find abuse contacts for observables☆70Updated 2 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆37Updated 3 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Updated 5 years ago
- Client API to query any Passive DNS implementation following the Passive DNS - Common Output Format.☆82Updated 7 months ago
- fqdn_parser (Fully Qualified Domain Name Parser) is a library for parsing FQDNs into their component parts, as well as providing addition…☆27Updated last year
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆65Updated 2 years ago
- Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets☆32Updated 3 months ago
- Incident Response Network Tools☆24Updated 4 years ago
- Automatic detection engineering technical state compliance☆55Updated last year
- Modular command-line threat hunting tool & framework.☆17Updated 5 years ago
- Fast lookup server for NSRL and other hash database used in digital forensic☆45Updated 3 years ago
- Wireshark plugin to display Suricata analysis info☆95Updated 3 years ago
- Zeek package to detect Zerologon☆11Updated 3 years ago
- ☆18Updated 7 years ago
- D4 core software (server and sample sensor client)☆42Updated last year
- A Python implementation of the Community ID flow hashing standard☆23Updated last year
- Zeek package for tracking long connections to report them before they have completed.☆31Updated 3 months ago
- Extract indicators of compromise from text, including "escaped" ones.☆162Updated 5 years ago
- Check IOC provided by a MISP instance on Suricata events☆18Updated 6 years ago
- Workflows for Shuffle☆23Updated 2 years ago
- pyJARM is a library for doing JARM fingerprinting using python☆50Updated 6 months ago
- ☆35Updated 4 years ago
- setup zeek, previously Bro IDS☆18Updated this week