suricata-rule

There are 1 repository under suricata-rule topic.

al0ne / suricata-rules
Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
suricata suricata-rule ids signatures security
1105
advanced-threat-research / CVE-2020-16898
CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
cve-2020-16898 suricata suricata-rule lua icmpv6 bad-neighbor rce cve buffer-overflow mcafee atr microsoft windows-10 tcpip-stack buffer-overflow-vulnerability neighbor-discovery neighbor-discovery-protocol badneighbor
Language:Lua 207
travisbgreen / hunting-rules
Suricata rules for network anomaly detection
suricata-rule suricata ids nsm threat-hunting cybersecurity anomaly-detection cyber-threat-intelligence network-security network-monitoring lateral-movement threat-intelligence
152
aleksibovellan / opnsense-suricata-nmaps
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
crowdsec intrusion-detection intrusion-detection-system intrusion-prevention intrusion-prevention-system nmap nmap-results-analyse nmap-scan nmap-scans opnsense opnsense-firewall opnsense-plugins port-scan port-scanning suricata suricata-rule suricata-rules ids ips pfsense
41
Truvis / Suricata_Threat-Hunting-Rules
Collection of Suricata rule sets that I use modified to my environments.
suricata suricata-rules suricata-rule snort snort-rules snort-rules-generate snort3 security threat-intelligence threat-hunting threat-detection threat-analysis threat-response threat-monitor threat-intel threat-grid network-security network-monitoring network-analysis security-awareness
36
m-chrome / py-suricataparser
Pure python parser for Snort/Suricata rules.
suricata-rules suricata-rule snort-rules snort-rules-generate python3
Language:Python 23
advanced-threat-research / CVE-2020-16899
CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
cve-2020-16899 suricata suricata-rule lua icmpv6 neighbor-discovery neighbor-discovery-protocol rce cve buffer-overflow buffer-overflow-vulnerability mcafee atr microsoft windows-10 tcpip-stack vulnerability
Language:Lua 20
advanced-threat-research / Ripple-20-Detection-Logic
Ripple20 Critical Vulnerabilities - Detection Logic and Signatures
ripple20 dns detection-logic suricata suricata-rule lua treck tcpip-stack jsof mcafee atr rce cve heap-overflow ipv6 cve-2020-11901 cve-2020-11897 cve-2020-11896
Language:Lua 11
m-chrome / go-suricataparser
Golang Suricata/Snort rules parser and generator
golang golang-library golang-package snort-rules snort-rules-generate suricata suricata-rule suricata-rules
Language:Go 10
adi928 / brocata
Porting Suricata to Bro signatures
suricata-rule suricata zeek bro-ids python3 broctl
Language:Python 6
SCS-Labs / rules
Snort and Suricata Rules
cve suricata suricata-rules suricata-rule snort snort-rules
3
mcdulltii / simple_lamp-elk
Kibana logging for simple_lamp server
elasticsearch kibana docker docker-compose lamp lamp-stack lamp-server lamp-setup docker-container dockerfile dockerfiles siem suricata suricata-rule suricata-rules packetbeat metricbeat filebeat heartbeat load-balancing
Language:Shell 1