zam89 / suricatalogparser
A simple log parser for Suricata log file (JSON)
☆8Updated last year
Related projects ⓘ
Alternatives and complementary repositories for suricatalogparser
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 2 years ago
- Phactive - Monitoring an Environment with Nmap red teaming☆13Updated 5 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆15Updated 3 years ago
- Prototype system to monitor BGP routes and alert when anomalies are identified☆14Updated 5 years ago
- Pure Honeypots with an automated bash script☆19Updated 3 years ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 2 months ago
- The FastIR Server is a Web server to schedule FastIR Collector forensics collect thanks to the FastIR Agent☆12Updated 7 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆12Updated 4 years ago
- Cisco AMP threat hunting scripts☆14Updated 3 weeks ago
- An Installation Script for Bro IDS on Debian Based Systems☆20Updated 4 years ago
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- Log aggregation, analysis, alerting and correlation for Windows, Syslog and text based logs.☆24Updated 8 years ago
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Updated 7 months ago
- Triage automation for suspect URLs☆12Updated 5 years ago
- This is a simple Python script that connects to a MISP instance and retrieves attributes of specific types (such as IP addresses, URLs, a…☆16Updated last year
- Web interface for monitoring and interacting with Netflow data stored in Silk repositories.☆13Updated 5 years ago
- Example Suricata rules implementing some of my detection tactics☆20Updated last year
- HoneyDB Python Module☆13Updated 9 months ago
- Generic Signature Format for SIEM Systems☆14Updated 3 years ago
- ProcessBouncer is a simple but effective tool for blocking malware with a process-based approach. With a little fine-tuning this allows t…☆24Updated 3 years ago
- A Yara Lua output script for Suricata☆19Updated 5 years ago
- Repository resource threat intelligence for SOC☆10Updated 6 years ago
- Repo for Automations and other solutions for Elastic SIEM/Security.☆18Updated 3 years ago
- damn simple honey pot☆16Updated 8 years ago
- An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk☆23Updated 6 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sys…☆12Updated 7 years ago
- ☆29Updated 6 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆32Updated 9 months ago
- Gunslinger is used to hunt for Magecart sites using URLScan's API☆30Updated 2 years ago
- Scripts I have made for blue team☆16Updated 6 years ago