Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
-
Updated
Jul 8, 2023
#
suricata-rule
Here are 12 public repositories matching this topic...
CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
microsoft
lua
windows-10
rce
suricata
atr
cve
neighbor-discovery
buffer-overflow
mcafee
neighbor-discovery-protocol
suricata-rule
icmpv6
buffer-overflow-vulnerability
tcpip-stack
cve-2020-16898
bad-neighbor
badneighbor
-
Updated
Oct 26, 2020 - Lua
Suricata rules for network anomaly detection
cybersecurity
suricata
ids
network-monitoring
threat-hunting
nsm
network-security
threat-intelligence
anomaly-detection
suricata-rule
cyber-threat-intelligence
lateral-movement
-
Updated
Nov 28, 2024
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
nmap
opnsense
suricata
ids
intrusion-detection
pfsense
intrusion-prevention
ips
port-scanning
intrusion-detection-system
nmap-results-analyse
port-scan
suricata-rule
intrusion-prevention-system
suricata-rules
opnsense-firewall
nmap-scan
crowdsec
opnsense-plugins
nmap-scans
-
Updated
May 26, 2024
Collection of Suricata rule sets that I use modified to my environments.
security
suricata
network-monitoring
threat-hunting
network-analysis
network-security
snort
threat-analysis
threat-intelligence
security-awareness
threat-intel
suricata-rule
snort-rules
threat-detection
threat-grid
snort-rules-generate
threat-response
suricata-rules
threat-monitor
snort3
-
Updated
Sep 13, 2020
Pure python parser for Snort/Suricata rules.
-
Updated
Mar 13, 2024 - Python
CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
microsoft
lua
windows-10
rce
suricata
vulnerability
atr
cve
neighbor-discovery
buffer-overflow
mcafee
neighbor-discovery-protocol
suricata-rule
icmpv6
buffer-overflow-vulnerability
tcpip-stack
cve-2020-16899
-
Updated
Oct 19, 2020 - Lua
Ripple20 Critical Vulnerabilities - Detection Logic and Signatures
dns
lua
ipv6
rce
suricata
atr
cve
mcafee
suricata-rule
detection-logic
heap-overflow
tcpip-stack
ripple20
treck
jsof
cve-2020-11901
cve-2020-11897
cve-2020-11896
-
Updated
May 28, 2021 - Lua
Golang Suricata/Snort rules parser and generator
golang
suricata
golang-library
golang-package
suricata-rule
snort-rules
snort-rules-generate
suricata-rules
-
Updated
Jun 13, 2024 - Go
Snort and Suricata Rules
-
Updated
May 18, 2021
Kibana logging for simple_lamp server
docker
dockerfile
elasticsearch
dockerfiles
kibana
docker-compose
docker-container
filebeat
heartbeat
lamp
suricata
siem
metricbeat
packetbeat
lamp-server
lamp-setup
load-balancing
lamp-stack
suricata-rule
suricata-rules
-
Updated
Oct 5, 2020 - Shell
Improve this page
Add a description, image, and links to the suricata-rule topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the suricata-rule topic, visit your repo's landing page and select "manage topics."