Alternatives and similar repositories for Snort-Rules

Users that are interested in Snort-Rules are comparing it to the libraries listed below

• stratosphereips / zeek_anomaly_detector
  A completely automated anomaly detector Zeek network flows files (conn.log).
  ☆78Updated 9 months ago
• arvindpj007 / Suricata-Detect-DoS-Attack
  Configuring the Suricata IDS to detect DoS attacks by adding custom rule file.
  ☆39Updated 5 years ago
• StamusNetworks / suricata-analytics
  ☆34Updated 3 months ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆80Updated this week
• Loginsoft-LLC / threat-detection-rules
  Threat Detection & Anomaly Detection rules for popular open-source components
  ☆52Updated 2 years ago
• karthikkbala / MISP-QRadar-Integration
  The Project can be used to integrate QRadar with MISP Threat Sharing Platform
  ☆39Updated 2 years ago
• corelight / threat-hunting-guide
  ☆51Updated 3 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆71Updated 4 years ago
• corelight / zeek2es
  A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…
  ☆35Updated 2 years ago
• vuldb / cyber_threat_intelligence
  Cyber Threat Intelligence Data, Indicators, and Analysis
  ☆85Updated 4 months ago
• michalpurzynski / zeek-scripts
  zeek-scripts
  ☆44Updated 6 years ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆107Updated this week
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆162Updated 3 weeks ago
• malicialab / iocsearcher
  A library and command line tool for extracting indicators of compromise (IOCs) from security reports in PDF, HTML, Word, or text format
  ☆31Updated 3 weeks ago
• Security-Onion-Solutions / securityonion-soc
  ☆53Updated this week
• Truvis / Suricata_Threat-Hunting-Rules
  Collection of Suricata rule sets that I use modified to my environments.
  ☆39Updated 4 years ago
• The-Shadowserver-Foundation / api_utils
  Sample programs to access the API
  ☆81Updated 2 weeks ago
• nipunjaswal / networkforensics
  Hands-On Network Forensics by Nipun Jaswal
  ☆46Updated last year
• daffainfo / suricata-rules
  Suricata rules that can detect a wide range of threats, including malware, exploits, and other malicious activity especially web applicat…
  ☆45Updated last year
• thongsia / Public-Pcaps
  ☆51Updated 6 years ago
• hgascon / security-datasets
  A collection of resources for security data
  ☆41Updated 7 years ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆131Updated 8 months ago
• chrisjd20 / Snorpy
  Snorpy is a python script the gives a Gui interface to help those new to snort create rules.
  ☆62Updated 8 months ago
• leonov-av / vulristics
  Extensible framework for analyzing publicly available information about vulnerabilities
  ☆113Updated this week
• csirtgadgets / cif-v5
  The FASTEST way to consume threat intel.
  ☆68Updated 2 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆103Updated 3 years ago
• michaelhidalgo / attack-to-elk
  This program exports MITRE ATT&CK framework in ELK dashboard
  ☆78Updated 2 years ago
• elcabezzonn / Pcaps
  ☆45Updated last year
• Hestat / ossec-sysmon
  A Ruleset to enhance detection capabilities of Ossec using Sysmon
  ☆92Updated 3 years ago
• StamusNetworks / suricata-4-analysts
  The Security Analyst’s Guide to Suricata
  ☆56Updated 2 weeks ago