snort topic

A website and framework for testing NIDS detection

0xtf

自己收藏的常用dockerfile

gui66497

psad: Intrusion Detection and Log Analysis with iptables

mrash

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.

mandiant

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

mandiant

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

deepfence

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

jasonish

Pulled Pork for Snort and Suricata rule management (from Google code)

shirkdog

Snort FAQ

Cisco-Talos

Snort IDS/IPS log analytics using the Elastic Stack.

robcowart