Top 59 ids open source projects

** README ** This repo has MOVED to https://github.com/quadrantsec/sagan

✭ 236

Wazuh - Kibana plugin

✭ 212

typescript security monitoring elasticsearch kibana incident-response security-hardening vulnerability-detection compliance gdpr intrusion-detection ids log-analysis pci-dss

Wazuh Docker

Wazuh - Docker containers

✭ 213

css docker security monitoring elasticsearch incident-response security-hardening vulnerability-detection compliance intrusion-detection ids log-analysis pci-dss

Pi.alert

WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices

✭ 209

javascript security network wifi adminlte pi-hole dnsmasq scan intrusion-detection ids lan

Py Idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

✭ 205

python intrusion-detection ids suricata

Whids

Open Source EDR for Windows

✭ 188

go windows dfir threat-hunting ids sysmon

Quantuminsert

Quantum Insert

✭ 186

python html detection pcap ids

Wazuh

Wazuh - The Open Source Security Platform

Suricata

Suricata git repository maintained by the OISF

✭ 2,274

c rust python M4 Makefile shell security network-monitoring ids nsm ips

Suricata Update

The tool for updating your Suricata rules.

✭ 143

python security network-monitoring ids suricata

Threatbus

🚌 The missing link to connect open-source threat intelligence tools.

✭ 139

python threat-hunting threat-intelligence threatintel ids

Snort Rules

An UNOFFICIAL Git Repository of Snort Rules(IDS rules) Releases.

✭ 135

c intrusion-detection ids

Docker Bro

Bro IDS Dockerfile

✭ 126

docker elasticsearch kafka network-analysis network-monitoring ids

Particle

64 bit ID Generator

✭ 125

ids

Uuid Random

Fastest UUID with cryptographic PRNG for JS

✭ 87

javascript distributed-systems uuid ids

Teler

Real-time HTTP Intrusion Detection

✭ 1,248

go golang log threat-hunting threat-intelligence logs intrusion-detection ids threat

Adjective Adjective Animal

Suitably random and reasonably unique human readable (and fairly adorable) ids

✭ 69

javascript ids

Optimus

🤖 Id obfuscation based on Knuth's multiplicative hashing method for PHP.

✭ 1,084

laravel obfuscation ids transformations hashids

Wazuh Chef

Wazuh - Chef cookbooks

✭ 9

ruby security monitoring elasticsearch chef incident-response security-hardening vulnerability-detection compliance intrusion-detection ids log-analysis pci-dss

Ossa

Open-Source Security Architecture | 开源安全架构

✭ 796

security security-tools security-audit vulnerabilities vulnerability-scanners security-scanner security-vulnerability application-security ids

Fail2ban

Daemon to ban hosts that cause multiple authentication errors

✭ 6,677

python shell perl linux security macos monitoring security-tools bsd intrusion-detection ids hids fail2ban intrusion-prevention gplv2 ban-hosts ips anti-bot attack-prevention loganalyzer ban-management

Selks

A Suricata based IDS/IPS distro

✭ 707

shell linux security monitoring network management distribution ids suricata

Shortid

Super short, fully unique, non-sequential and URL friendly Ids

✭ 657

go ids

Hashids

A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.

✭ 4,596

PHP hash encoding ids hashids composer-packages database-ids

Suricata Rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

✭ 397

security ids suricata

Awesome Cybersecurity Datasets

A curated list of amazingly awesome Cybersecurity datasets

✭ 380

security data learning deeplearning malware cybersecurity events datasets machinelearning attack logs dataframe traffic deep ids

Sigma

Generic Signature Format for SIEM Systems

✭ 4,418

python Makefile security monitoring elasticsearch logging ids siem sysmon splunk signatures

Wazuh Ruleset

Wazuh - Ruleset

✭ 305

python security monitoring elasticsearch incident-response security-hardening vulnerability-detection compliance intrusion-detection ids log-analysis pci-dss

Hashids.js

A small JavaScript library to generate YouTube-like ids from numbers.

✭ 3,525

javascript typescript shell hacktoberfest node npm-package hash encoding ids hashids database-ids

Evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

✭ 286

rust security ids netsec suricata

Security Onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

✭ 2,956

dfir intrusion-detection ids network-security-monitoring log-management nsm hunting

bsmtrace

BSM based intrusion detection system

✭ 31

c Yacc Roff Lex bsm audit ids intrusion-detection

docker-suricata

A Suricata Docker image.

✭ 120

shell python Makefile docker container suricata ids nsm podman

gonids

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

✭ 140

go parse network suricata ids network-security security-tools

Remote-Integrity-Tool

The DearBytes remote integrity tool is an IDS (Intrusion Detection System) that keeps track of files on a remote server and logs an event if a file gets added, removed or modified.

✭ 12

python security ids intrusion-detection-system integrity-monitoring

NIDS-Intrusion-Detection

Simple Implementation of Network Intrusion Detection System. KddCup'99 Data set is used for this project. kdd_cup_10_percent is used for training test. correct set is used for test. PCA is used for dimension reduction. SVM and KNN supervised algorithms are the classification algorithms of project. Accuracy : %83.5 For SVM , %80 For KNN

✭ 45

python data-science machine-learning data-mining svm pca ids intrusion-detection dimensionality-reduction data-mining-algorithms knn intrusion-detection-system kdd99 kdd-dataset

docker-zeek

Zeek IDS Dockerfile

✭ 82

Zeek Dockerfile Makefile shell docker elasticsearch kafka ids network-monitoring zeek zeek-ids

graylog-zeek-content-pack

BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.

✭ 18

graylog bro ids zeek security-onion graylog-content-pack

ids

高效的分布式id生成器，每个客户端实例tps可达到100万，服务端毫无压力。即使服务端宕机了，id生成依然可用。支持多数据中心，支持id加密。

✭ 47

java id ids id-generator distributed-id idcenter

TheBriarPatch

An extremely crude, lightweight Web Frontend for Suricata/Bro to be used with BriarIDS

✭ 21

PHP shell HTML security raspberrypi bro suricata ids intrusion-detection

ProbeManager

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...

✭ 73

python shell HTML ids management-system

harsh

Hashids implementation in Rust

✭ 48

rust encoding hashids hash javascript-library ids rust-library database-ids

Fragscapy

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

✭ 52

python Makefile network firewall ids fuzzing evasion

IPRadar2

Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)

✭ 20

python api real-time google-maps firewall pyqt5 realtime ids pyqt network-analysis google-maps-api tshark firewall-configuration firewall-rules pyshark idps

wazuh-cloudformation

Wazuh - Amazon AWS Cloudformation

✭ 32

shell security elasticsearch log-analysis monitoring incident-response ids pci-dss security-hardening vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-monitoring

eewids

Easily Expandable Wireless Intrusion Detection System

✭ 25

python shell Dockerfile detection wifi ids nids wifi-security ieee80211 wids kismet

mole

Yara powered NIDS with high speed packet capture powered by PF_RING

✭ 51

go shell Makefile YARA pf-ring ids libpcap nids yara

Scanr

Detect x86 shellcode in files and traffic.

✭ 16

python emulator security detection emulation ids ips

Anomaly-detection-system

Machine learning based Intrusion detection system (IDS)

✭ 27

java c HTML python C++javascript machine-learning network ids intrusion-detection-system

youtube-playlist

❄️ Extract links, ids, and names from a youtube playlist

✭ 73

javascript nodejs api scraper youtube links youtube-api npm-package names urls ids

TNSR IDS

IDS using a port mirror, Snort and an alert -> RESTCONF utility

✭ 30

go ids vpp snort

ML-IDS

An IDS implementation using machine learning

✭ 30

python security ids

shortid

Super short, fully unique, non-sequential and URL-friendly Ids

✭ 20

kotlin id ids shortid

hashids.pm

Hashids, ported for Perl

✭ 15

perl Raku encoding hashids hash perl-module ids cpan hacktoberfest database-ids

firewall-controller

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics

✭ 37

go Makefile Smarty Dockerfile kubernetes services ids nftables networkpolicy firewall-controller firewall-crd

UTMFW

UTM Firewall on OpenBSD

✭ 104

PHP HTML shell perl CSS Makefile notifications openbsd anti-virus firewall web-ui ids anti-spam ips utm web-filter ssl-inspection packet-filter installation-iso windows-ui sslproxy androdi-ui pffw utmfw pfre

prickly-pete

A script using Docker to quickly bring up some honeypots exposing lots of services. For research, reconnaissance, and fun. (DISCLAIMER may not be fun, not to be taken internally, aim away from face)

✭ 29

shell HTML Dockerfile docker ssh docker-compose honeypot ids ics scada dionaea cowrie reconnaissance expose-services contpot ics-scada

1-59 of 59 ids projects