CybercentreCanada / assemblyline-service-suricata

Assemblyline 4 network capture analysis service

Home Page:https://cybercentrecanada.github.io/assemblyline4_docs/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Suricata Service

This service scans network capture files with signature and extract files from network capture.

NOTE: This service does not require you to buy any licence and is preinstalled and working after a default installation

Execution

The Suricata configuration file is available in suricata_.conf.suricata.yaml.

The ruleset(s) configured by default for use with this service are:

Organizations can add their own rulesets to this service.

About

Assemblyline 4 network capture analysis service

https://cybercentrecanada.github.io/assemblyline4_docs/

License:MIT License


Languages

Language:Python 54.2%Language:C 40.1%Language:Dockerfile 5.6%