snort

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

EgeBalci/deoptimizer

Evasion by machine code de-optimization.

3CORESec/testmynids.org

A website and framework for testing NIDS detection

jasonish/py-idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

ditekshen/detection

Detection in the form of Yara, Snort and ClamAV signatures.

mandiant/thiri-notebook

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.

mandiant/heyserial

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

Cisco-Talos/snort-faq

Snort FAQ

gui66497/dockerfiles

自己收藏的常用dockerfile

robcowart/synesis_lite_snort

Snort IDS/IPS log analytics using the Elastic Stack.

0xtf/testmynids.org

A website and framework for testing NIDS detection

pfelk/docker

Deploy pfelk with docker-compose

Truvis/Suricata_Threat-Hunting-Rules

Collection of Suricata rule sets that I use modified to my environments.

thereisnotime/Snort-Rules

Collection of Snort 2/3 rules.

Netgate/TNSR_IDS

IDS using a port mirror, Snort and an alert -> RESTCONF utility

faucetsdn/network-tools

Network Tools

bhdresh/SnortRules

This is an open source Snort rules repository

sous-chefs/snort

Development repository for the snort cookbook

sleetymattgeorge/SNORT-GUI

SNORT GUI: Your very own trusted blueteam forensic companion for SNORT IDS.

pfelk/ansible

Ansible playbook automation for pfelk

ClamOne/ClamOne

Open Source Linux Frontend to the ClamAV Antivirus Engine

felixe/idsEventGenerator

aka GENESIDS: Reads and parses rules using a "snort like" syntax and generates and sends packets that trigger events in signature based IDS (Intrusion Detection Systems) using these rules

geekscrapy/docker-snort

Snort + Pulledpork + Websnort in Docker!

dthongvl/ids-machine-learning

IDS based on Machine Learning technical

shirkdog/pulledpork3

Pulled Pork for Snort3 rule management

CYB3RMX/BadPig

A compilation of snort rules for detecting malware traffic.

NathanGibbs3/BASE

The continuation of BASE (Basic Analysis and Security Engine), by @secureideas, et al. A web app to query and analyze alerts coming from a SNORT IDS.

bspwnmaster/Raspberry-Pi-Snort.conf-and-Alerting-Engine

Home router IDS solution with a Raspberry Pi 3. Dynamically resolves device name, manufacturer, and alerts user of Snort analytics through email or text. Currently handles around 15,000 rules.

Koen1999/suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

chrislee35/snort-rule

parses and generates Snort rules similar to PERL's Snort::Rule

mrlesmithjr/ansible-snort

redBorder/barnyard2

Barnyard2 is a dedicated spooler for Snort's unified2 binary output format.

hrbrmstr/porc

:boar: Tools to Work with 'Snort' Rules, Logs and Data

redBorder/daq

Snort/Suricata DAQ module with DPDK patch