Alternatives and similar repositories for suricata-rules

Users that are interested in suricata-rules are comparing it to the libraries listed below

• Truvis / Suricata_Threat-Hunting-Rules
  Collection of Suricata rule sets that I use modified to my environments.
  ☆39Updated 4 years ago
• advanced-threat-research / Ripple-20-Detection-Logic
  Ripple20 Critical Vulnerabilities - Detection Logic and Signatures
  ☆12Updated 4 years ago
• Security-Onion-Solutions / securityonion-soc
  ☆55Updated this week
• cyware-labs / Threat-Response-Docker
  ☆43Updated 2 years ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆83Updated last week
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆34Updated last year
• travisbgreen / hunting-rules
  Suricata rules for network anomaly detection
  ☆164Updated 2 months ago
• Security-Onion-Solutions / securityonion-image
  ☆48Updated this week
• michalpurzynski / zeek-scripts
  zeek-scripts
  ☆44Updated 6 years ago
• Cyberg-ON / Timon-Rules
  Community-based CybergON-powered Suricata rules
  ☆12Updated 3 years ago
• deep-security / sysmon-config
  ☆13Updated 5 years ago
• mitre / engage
  MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.
  ☆65Updated last year
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆82Updated 2 months ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆110Updated last week
• corelight / zeek2es
  A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…
  ☆35Updated 2 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• polylogyx / DetectionRules
  ☆10Updated 6 years ago
• klingerko / nids-rule-library
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆26Updated last year
• Shuffle / workflows
  Workflows for Shuffle
  ☆23Updated 2 years ago
• jhainly / det3ct-the-att-ck
  SIEM Detection Use Case Library mapped to MITRE ATT&CK tactics and techniques
  ☆12Updated 6 years ago
• ExabeamLabs / Content-Library-CIM2
  ☆24Updated last week
• HKcyberstark / TI_Mod
  Threat Intelligence with Elastic - Minemeld integration with Elasticsearch
  ☆19Updated 4 years ago
• SCS-Labs / TheWatchList
  Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.
  ☆16Updated 4 years ago
• markuskont / pikksilm
  Look into EDR events from network
  ☆23Updated 2 months ago
• ElasticSA / elsec_dr2an
  Script to create MITRE ATT&CK Navigator layers from the annotated detection rules in Elastic Security (Kibana).
  ☆20Updated 2 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆31Updated last week
• Loginsoft-LLC / threat-detection-rules
  Threat Detection & Anomaly Detection rules for popular open-source components
  ☆52Updated 2 years ago
• mitre / human
  Caldera plugin to deploy "humans" to emulate user behavior on systems
  ☆28Updated last year
• elastic / endpoint
  ☆38Updated 3 months ago
• jakewarren / suricata-rule-generator
  Quickly generate suricata rules for IOCs
  ☆29Updated 4 years ago