Alternatives and similar repositories for suricata-rule

Users that are interested in suricata-rule are comparing it to the libraries listed below

• tianyulab / Threat_Hunting_with_ELK
  天御攻防实验室 - 威胁猎杀实战系列
  ☆102Updated 6 years ago
• al0ne / suricata_optimize
  Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置
  ☆143Updated 5 years ago
• tianyulab / Hunting_lateral_movement
  《横向移动攻击与检测技术》专栏文章
  ☆17Updated 5 years ago
• Qianlitp / WatchAD-Web
  A simple web platform for WatchAD
  ☆110Updated 2 years ago
• baidu-security / webshell-scanner-client
  A golang client of our webshell scanner API
  ☆28Updated 7 years ago
• LennyLeng / SOC_Sankey_Generator
  ☆57Updated 4 years ago
• NotSoSecure / icmp_tunnel_ex_filtrate
  Code snippet accompanying blog post
  ☆30Updated 9 years ago
• hardenedlinux / hardenedlinux-zeek-scripts
  ☆38Updated last year
• n4ll3ec / ThreatHound
  ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source t…
  ☆40Updated 5 years ago
• nixawk / nmap_vscan
  nmap service and application version detection (without nmap installation)
  ☆115Updated 7 years ago
• RF-CTI / SANS-summit
  ☆30Updated 2 years ago
• cahi1l1yn / aclAuditor
  Audit your acl of network device
  ☆34Updated 5 years ago
• 360netlab / flint
  The python client of passivedns.cn
  ☆98Updated 6 years ago
• zhanghaoyil / seesaw
  Automatic reversed shell detecting and defensing
  ☆51Updated 6 years ago
• grayddq / HIDS
  HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分…
  ☆107Updated 7 years ago
• sdlchina / sdlchina-web
  SDL China
  ☆33Updated 6 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆165Updated 6 years ago
• hi-WenR0 / MLCheckWebshell
  ☆106Updated 7 years ago
• G4rb3n / Script-Ganker
  恶意脚本检测分类工具
  ☆40Updated 4 years ago
• md-irohas / tcppc-go
  tcppc: A simple honeypot to capture TCP/TLS/UDP payloads on ALL ports.
  ☆35Updated 4 years ago
• mylamour / Oops-Webshell
  Oops, It's funny to detect a webshell. Temporarily not maintained
  ☆18Updated 7 years ago
• NewBee119 / check_ip
  check_IP is to judge whether a IP is malicious based on open threat intelligence，基于开源威胁情报AlienVault，排查IP地址及域名的恶意性
  ☆52Updated 7 years ago
• penoxcn / VMware
  ☆21Updated 7 years ago
• momosecurity / cornerstone
  Linux命令转发记录
  ☆64Updated 6 years ago
• RASSec / yandi-scanner
  Network Security Vulnerability Scanner
  ☆117Updated 2 years ago
• h7hac9 / ThreatCollector
  威胁情报采集系统
  ☆32Updated 2 years ago
• grayddq / FileCheck
  本脚本是HIDS组成的一部分，旨在对指定监控目录进行文件hash记录，定时运行，发现文件替换、修改等后门可疑程序。
  ☆13Updated 7 years ago
• lcatro / WebShell-Detect-By-Machine-Learning
  使用机器学习识别WebShell
  ☆127Updated 7 years ago
• Sep0lkit / Blog
  Sep0lkit's Blog
  ☆15Updated 5 years ago
• se55i0n / Awvs_Nessus_Scanner_API
  扫描器Awvs 11和Nessus 7 Api利用脚本
  ☆114Updated 7 years ago