slinkwatch by DCSO

automatic enumeration and maintenance of Suricata monitoring interfaces

updated at Oct. 31, 2024, 2:14 a.m.

8 +0

11 +0

5 +0

py-idstools by jasonish

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

updated at Nov. 1, 2024, 7:16 a.m.

34 +0

276 +0

85 +0

gonids by google

gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/

updated at Nov. 5, 2024, 9:40 a.m.

12 +0

180 +0

48 +0

suricata_exporter by corelight

A Prometheus Exporter for Suricata

updated at Nov. 8, 2024, 6:34 p.m.

4 +0

19 +0

11 +0

SEPTun by pevma

Suricata Extreme Performance Tuning guide

updated at Nov. 11, 2024, 6:59 p.m.

22 +0

204 +1

22 +0

OTX-Suricata by AlienVault-OTX

The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.

updated at Nov. 12, 2024, 3:03 a.m.

18 +0

107 +1

32 +0

opnsense-suricata-nmaps by aleksibovellan

OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans

updated at Nov. 12, 2024, 10:56 a.m.

1 +0

52 +1

4 +0

KTS7 by StamusNetworks

Kibana 7 Templates for Suricata IDPS Threat Hunting

updated at Nov. 12, 2024, 3:50 p.m.

7 +0

39 +1

11 +0

suricata-4-analysts by StamusNetworks

The Security Analyst’s Guide to Suricata

updated at Nov. 12, 2024, 3:50 p.m.

8 +1

52 +1

12 +0

suricata-zabbix by catenacyber

Zabbix plugin for Suricata

updated at Nov. 13, 2024, 9:34 a.m.

NEW!

1 +0

1 +0

0 +0

aristotle by secureworks

None

updated at Nov. 14, 2024, 9:27 a.m.

8 +0

36 +2

8 +0

suricata-language-server by StamusNetworks

Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.

updated at Nov. 14, 2024, 3:27 p.m.

7 +0

64 +1

8 +1

suricata-analytics by StamusNetworks

None

updated at Nov. 14, 2024, 3:38 p.m.

8 +0

27 +2

10 +0

evebox by jasonish

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

updated at Nov. 15, 2024, midnight

43 +0

431 +1

67 +0

docker-suricata by jasonish

A Suricata Docker image.

updated at Nov. 15, 2024, 11:54 a.m.

13 +0

263 +1

76 +0

PacketStreamer by deepfence

Distributed tcpdump for cloud native environments

updated at Nov. 16, 2024, 6:13 a.m.

12 +0

1,885 +4

251 -1

scirius by StamusNetworks

Scirius is a web application for Suricata ruleset management and threat hunting.

updated at Nov. 16, 2024, 2:12 p.m.

56 +0

635 +2

150 +1

leonidas by WithSecureLabs

Automated Attack Simulation in the Cloud, complete with detection use cases.

updated at Nov. 16, 2024, 5:12 p.m.

26 +1

497 +12

60 +0

dalton by secureworks

Suricata and Snort IDS rule and pcap testing system

updated at Nov. 17, 2024, 7:12 p.m.

41 -3

451 +2

90 +0

Malcolm by cisagov

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

updated at Nov. 17, 2024, 10:28 p.m.

53 -1

1,963 +8

331 +5