ids

There are 24 repositories under ids topic.

fail2ban / fail2ban
Daemon to ban hosts that cause multiple authentication errors
anti-bot attack-prevention ban-hosts ban-management bsd fail2ban gplv2 hids ids intrusion-detection intrusion-prevention ips linux loganalyzer macos monitoring python security security-tools
Language:Python 15911
crowdsecurity / crowdsec
CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
attacks-prevention detection ids ips linux protection security waf
Language:Go 11524
SigmaHQ / sigma
Main Sigma Rule Repository
security monitoring siem logging signatures elasticsearch splunk ids sysmon
Language:Python 9772
OISF / suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
security ids ips nsm network-monitoring suricata intrusion-detection-system intrusion-prevention-system threat-hunting cybersecurity network-monitor
Language:C 5750
hashids
vinkla / hashids
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
composer-packages database-ids encoding hash hashids ids php php-library
Language:PHP 5425
niieani / hashids.js
A small JavaScript library to generate YouTube-like ids from numbers.
hashids javascript database-ids ids hash encoding npm-package node hacktoberfest
Language:TypeScript 4289
Security-Onion-Solutions / security-onion
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
dfir hunting ids intrusion-detection log-management network-security-monitoring nsm
3103
teler
teler-sh / teler
Real-time HTTP Intrusion Detection
threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer go golang intrusion-detection intrusion threat threat-rules analyze-logs iocs logs log-analyzer log
Language:Go 3070
pucherot / Pi.Alert
WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices
wifi lan ids scan network intrusion-detection security pi-hole dnsmasq arp-scan adminlte mac-address
Language:JavaScript 2231
shramos / Awesome-Cybersecurity-Datasets
A curated list of amazingly awesome Cybersecurity datasets
data datasets learning security cybersecurity attack malware dataframe traffic logs events machinelearning deep deeplearning ids ips
1837
StamusNetworks / Clear-NDR-ISO
A Suricata based NDR distribution
suricata network security monitoring management ids ips linux distribution security-monitoring threat-hunting network-intrusion-detection network-security gui user-interface
Language:Shell 1574
nzymedefense / nzyme
CLOSE ACCESS DENIAL.
detection ethernet ids ndr network response security visibility wifi wireless
Language:Java 1519
0xrawsec / whids
Open Source EDR for Windows
dfir threat-hunting windows ids sysmon edr
Language:Go 1281
jenssegers / optimus
🤖 Id obfuscation based on Knuth's multiplicative hashing method for PHP.
obfuscation ids optimus hashids transformations laravel
Language:PHP 1271
al0ne / suricata-rules
Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
suricata suricata-rule ids signatures security
1245
teris-io / shortid
Super short, fully unique, non-sequential and URL friendly Ids
id ids shortid
Language:Go 959
wazuh / wazuh-docker
Wazuh - Docker containers
wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch security-hardening log-analysis ids pci-dss file-integrity-management security-awareness vulnerability-detection incident-response hacktoberfest hacktoberfest-accepted
Language:Shell 954
bloodzer0 / ossa
Open-Source Security Architecture | 开源安全架构
security security-vulnerability security-tools security-audit security-scanner ids ips business-security application-security code-audit vulnerabilities vulnerability-scanners
942
stratosphereips / StratosphereLinuxIPS
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.
docker pcap machine-learning ai ids zeek ips stratosphere-ips endpoint-protection intrusion-detection-system intrusion-prevention-system network-analysis network-security gsoc-2023 gsoc-2024
Language:Python 840
wazuh / wazuh-ruleset
Wazuh - Ruleset
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response
Language:Python 489
wazuh / wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring openscap security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response gdpr opensearch-dashboards opensearch-plugins
Language:TypeScript 487
jasonish / evebox
Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
security netsec suricata ids ips nsm
Language:Rust 471
teler-waf
teler-sh / teler-waf
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
ids teler waf teler-ids teler-waf go golang http middleware router security go-library go-package security-tools
Language:Go 390
wazuh / wazuh-ansible
Wazuh - Ansible playbook
wazuh ansible ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch security-hardening ids pci-dss file-integrity-management security-awareness log-analysis vulnerability-detection incident-response hacktoberfest hacktoberfest-accepted
Language:Jinja 377
jasonish / docker-suricata
A Suricata Docker image.
suricata ids nsm docker container podman
Language:Shell 303
jasonish / py-idstools
idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
ids intrusion-detection snort suricata unified2
Language:Python 282
OISF / suricata-update
The tool for updating your Suricata rules.
suricata security ids ips nsm network-monitoring
Language:Python 282
tenzir / threatbus
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
threat-intelligence threatintel threat-hunting ids zeek misp opencti opencti-connector sightings threat-bus threat-intelligence-data cif3 cif
Language:Python 265
IDS
buildingSMART / IDS
Computer interpretable (XML) standard to define Information Delivery Specifications for BIM (mainly used for IFC)
informationdeliveryspecification ifc industryfoundationclasses openbim buildingsmart ids
Language:C# 263
beave / sagan
** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
security ids ips siem log syslog nsm log-monitoring
229
cyber-security
alik604 / cyber-security
Machine Learning for Network Intrusion Detection & Misc Cyber Security Utilities
python malware malware-detection unsw-nb15 cyber-security network-intrusion-detection intrusion-detection rainbow-table denial-of-service financial-anomaly-detection kdd kdd99 nsl-kdd unsw pytorch deep-learning ids security anomaly-detection machine-learning
Language:Jupyter Notebook 213
fox-it / quantuminsert
Quantum Insert
quantum-insert python detection pcap ids man-on-the-side
Language:HTML 213
satta / awesome-suricata
A curated list of awesome things related to Suricata
awesome awesome-list ids ips lists nsm suricata
204
google / gonids
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
suricata parse security-tools network-security network ids
Language:Go 189
travisbgreen / hunting-rules
Suricata rules for network anomaly detection
suricata-rule suricata ids nsm threat-hunting cybersecurity anomaly-detection cyber-threat-intelligence network-security network-monitoring lateral-movement threat-intelligence
176
UTMFW
sonertari / UTMFW
UTM Firewall on OpenBSD
utm firewall openbsd ssl-inspection sslproxy web-filter anti-virus anti-spam ids ips packet-filter web-ui androdi-ui windows-ui installation-iso pfre notifications utmfw pffw
Language:PHP 171