gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

✭ 140

go parse network suricata ids network-security security-tools

brimcap

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)

✭ 22

go Makefile pcap suricata zeek brim-desktop

vagrant-ids

An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk

✭ 21

shell vagrant splunk suricata intrusion-detection vagrantfile information-security bro-ids intrusion-detection-system

altprobe

collector for XDR and security posture service

✭ 62

C++shell Makefile c nmap suricata collector xdr snyk wazuh modsecurity-nginx soar zaproxy dependency-check kube-bench trivy falco-security kube-hunter cspm cwpp

TheBriarPatch

An extremely crude, lightweight Web Frontend for Suricata/Bro to be used with BriarIDS

✭ 21

PHP shell HTML security raspberrypi bro suricata ids intrusion-detection

rdppot

RDP honeypot

✭ 55

python honeypot suricata

S2AN

S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator

✭ 70

C#suricata threat-hunting threat-modeling sigma mitre-attack suricata-rules sigma-rules

balboa

server for indexing and querying passive DNS observations

✭ 42

c go api graphql dns rocksdb security monitoring passive suricata hacktoberfest graphql-api pdns passive-dns passivedns

testmynids.org

A website and framework for testing NIDS detection

✭ 55

shell suricata network-monitoring network-security-monitoring nids network-security snort emergingthreats

DPDK SURICATA-4 1 1

dpdk infrastructure for software acceleration. Currently working on RX and ACL pre-filter

✭ 81

c C++shell rust Makefile python dpdk acl suricata offloading

ansible

Ansible playbook automation for pfelk

✭ 23

ansible elasticsearch ansible-playbook elk maxmind dashboards suricata pfsense snort elk-stack pfelk

S1EM

This project is a SIEM with SIRP and Threat Intel, all in one.

✭ 270

YARA docker elasticsearch kibana logstash filebeat malware clamav suricata traefik misp thehive cortex sigma yara homer zeek opencti mwdb n8n arkime

pcapdj

pcapdj - dispatch pcap files

✭ 41

c Makefile pcap suricata network-analysis network-capture tcp-reassembly

fever

fast, extensible, versatile event router for Suricata's EVE-JSON format

✭ 47

go security json monitoring bloom-filter eve suricata intrusion-detection netsec pdns

1-31 of 31 suricata projects