snort

There are 8 repositories under snort topic.

deepfence / PacketStreamer
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
soc network-analysis tcpdump-like packet-capture packet-sniffer observability security-tools snort zeek suricata pcap traffic-monitoring infosectools secops forensics-tools hacktoberfest
Language:Go 1854
shirkdog / pulledpork
Pulled Pork for Snort and Suricata rule management (from Google code)
perl ruleset snort suricata
Language:Perl 415
mrash / psad
psad: Intrusion Detection and Log Analysis with iptables
intrusion-detection iptables log-analysis snort mirai-bot iptables-logs firewall
Language:Perl 377
jasonish / py-idstools
idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)
ids intrusion-detection snort suricata unified2
Language:Python 268
ditekshen / detection
Detection in the form of Yara, Snort and ClamAV signatures.
clamav detection ioc rules signatures snort yara
Language:YARA 184
testmynids.org
3CORESec / testmynids.org
A website and framework for testing NIDS detection
suricata suricata-rules nids networksecurity snort snort-rules
Language:Shell 162
mandiant / thiri-notebook
The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.
detection-rules snort threat-hunting yara
Language:Python 149
mandiant / heyserial
Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types
deserialization yara snort snort-rules-generate yara-rule-generator ysoserial
Language:YARA 133
Cisco-Talos / snort-faq
Snort FAQ
cisco snort snort-documentation wiki
116
gui66497 / dockerfiles
自己收藏的常用dockerfile
docker nessus snort
Language:Dockerfile 85
robcowart / synesis_lite_snort
Snort IDS/IPS log analytics using the Elastic Stack.
elasticsearch elk kibana log-analytics logstash snort
Language:Shell 81
testmynids.org
0xtf / testmynids.org
A website and framework for testing NIDS detection
emergingthreats network-monitoring network-security network-security-monitoring nids snort suricata
Language:Shell 56
pfelk / docker
Deploy pfelk with docker-compose
pfelk elasticsearch pfsense suricata snort docker-compose docker docker-pfelk maxmind
Language:Shell 56
Netgate / TNSR_IDS
IDS using a port mirror, Snort and an alert -> RESTCONF utility
snort ids vpp
Language:Go 36
Truvis / Suricata_Threat-Hunting-Rules
Collection of Suricata rule sets that I use modified to my environments.
suricata suricata-rules suricata-rule snort snort-rules snort-rules-generate snort3 security threat-intelligence threat-hunting threat-detection threat-analysis threat-response threat-monitor threat-intel threat-grid network-security network-monitoring network-analysis security-awareness
36
bhdresh / SnortRules
This is an open source Snort rules repository
snort signature rule open-source snort-rules
30
faucetsdn / network-tools
Network Tools
p0f docker-container plug-ins network-tap network-analysis network-monitoring network-security pcap pcap-analyzer snort mercury pmercury tcpdump libtrace asn ouilookup oui docker
Language:C 30
sous-chefs / snort
Development repository for the snort cookbook
chef-cookbook chef-resource snort chef hacktoberfest managed-by-terraform
Language:Ruby 27
thereisnotime / Snort-Rules
Collection of Snort 2/3 rules.
ruleset snort snort-rules intrusion-detection-system intrusion-prevention-system
26
pfelk / ansible
Ansible playbook automation for pfelk
ansible pfelk ansible-playbook elasticsearch elk-stack pfsense suricata maxmind snort dashboards elk
24
felixe / idsEventGenerator
aka GENESIDS: Reads and parses rules using a "snort like" syntax and generates and sends packets that trigger events in signature based IDS (Intrusion Detection Systems) using these rules
intrusion-detection snort
Language:C++ 21
ClamOne / ClamOne
Open Source Linux Frontend to the ClamAV Antivirus Engine
qt5 clamav snort gui
Language:C++ 19
dthongvl / ids-machine-learning
IDS based on Machine Learning technical
ids kmeans-clustering snort latex nsl-kdd
Language:C++ 19
shirkdog / pulledpork3
Pulled Pork for Snort3 rule management
python ruleset snort snort-rules
Language:Python 19
WhiteHatCyberus / SNORT-GUI
SNORT GUI: Your very own trusted blueteam forensic companion for SNORT IDS. OPTIMIZED, SECURE AND ABSOLUTELY FREE!
computer-science convolutional-neural-networks cybersecurity intrusion-detection-system intrusion-prevention network-analysis network-security pcap python3 snort wireshark gui
Language:Python 17
CYB3RMX / BadPig
A compilation of snort rules for detecting malware traffic.
intrusion-detection snort security snort-rules network-security malware-detection
15
geekscrapy / docker-snort
Snort + Pulledpork + Websnort in Docker!
docker ids pcap pulledpork snort websnort
Language:Dockerfile 15
bspwnmaster / Raspberry-Pi-Snort.conf-and-Alerting-Engine
Home router IDS solution with a Raspberry Pi 3. Dynamically resolves device name, manufacturer, and alerts user of Snort analytics through email or text. Currently handles around 15,000 rules.
alerts bash cisco email home hostname ids ips manufacturer networking nids raspberry-pi raspberry-pi-3 raspbian resolver router snort ssmtp switch text
Language:Shell 13
chrislee35 / snort-rule
parses and generates Snort rules similar to PERL's Snort::Rule
ruby snort
Language:Ruby 13
mrlesmithjr / ansible-snort
ansible-role ansible snort
Language:Shell 13
NathanGibbs3 / BASE
The continuation of BASE (Basic Analysis and Security Engine), by @secureideas, et al. A web app to query and analyze alerts coming from a SNORT IDS.
infosec php php5 php7 snort php8
Language:PHP 13
hrbrmstr / porc
:boar: Tools to Work with 'Snort' Rules, Logs and Data
r rstats snort snort-rules cybersecurity cyber r-cyber
Language:R 12
redBorder / barnyard2
Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.
redborder redborder-ng snort
Language:C 12
redBorder / daq
Snort/Suricata DAQ module with DPDK patch
redborder snort redborder-ng
Language:C 10
shrunbr / graylog_pfsense_barnyard2
A method for parsing Snort Barnyard2 logs from pfSense in Graylog
graylog snort pfsense json elasticsearch
10
SRouting / SR-sfc-demo
Chaining of SR-aware and SR-unaware Service Functions
srv6 linux nfv sfc segment-routing sr snort iptables
Language:Shell 10

snort

deepfence / PacketStreamer

shirkdog / pulledpork

mrash / psad

jasonish / py-idstools

ditekshen / detection

3CORESec / testmynids.org

mandiant / thiri-notebook

mandiant / heyserial

Cisco-Talos / snort-faq

gui66497 / dockerfiles

robcowart / synesis_lite_snort

0xtf / testmynids.org

pfelk / docker

Netgate / TNSR_IDS

Truvis / Suricata_Threat-Hunting-Rules

bhdresh / SnortRules

faucetsdn / network-tools

sous-chefs / snort

thereisnotime / Snort-Rules

pfelk / ansible

felixe / idsEventGenerator

ClamOne / ClamOne

dthongvl / ids-machine-learning

shirkdog / pulledpork3

WhiteHatCyberus / SNORT-GUI

CYB3RMX / BadPig

geekscrapy / docker-snort

bspwnmaster / Raspberry-Pi-Snort.conf-and-Alerting-Engine

chrislee35 / snort-rule

mrlesmithjr / ansible-snort

NathanGibbs3 / BASE

hrbrmstr / porc

redBorder / barnyard2

redBorder / daq

shrunbr / graylog_pfsense_barnyard2

SRouting / SR-sfc-demo