⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Pulled Pork for Snort and Suricata rule management (from Google code)

psad: Intrusion Detection and Log Analysis with iptables

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

Detection in the form of Yara, Snort and ClamAV signatures.

A website and framework for testing NIDS detection

The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat hunting rules.

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

Snort FAQ

自己收藏的常用dockerfile

Snort IDS/IPS log analytics using the Elastic Stack.

A website and framework for testing NIDS detection

Deploy pfelk with docker-compose

IDS using a port mirror, Snort and an alert -> RESTCONF utility

Collection of Suricata rule sets that I use modified to my environments.

Network Tools

This is an open source Snort rules repository

Development repository for the snort cookbook

Collection of Snort 2/3 rules.

Ansible playbook automation for pfelk