snort

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Pulled Pork for Snort and Suricata rule management (from Google code)

psad: Intrusion Detection and Log Analysis with iptables

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

Snort FAQ

Detection in the form of Yara, Snort and ClamAV signatures.

自己收藏的常用dockerfile

Snort IDS/IPS log analytics using the Elastic Stack.

A website and framework for testing NIDS detection

A website and framework for testing NIDS detection

Deploy pfelk with docker-compose

IDS using a port mirror, Snort and an alert -> RESTCONF utility

Network Tools

Collection of Suricata rule sets that I use modified to my environments.

Development repository for the snort cookbook

Ansible playbook automation for pfelk

This is an open source Snort rules repository

aka GENESIDS: Reads and parses rules using a "snort like" syntax and generates and sends packets that trigger events in signature based IDS (Intrusion Detection Systems) using these rules