Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Suricata, Snort and Zeek IDS rule and pcap testing system
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.
RDP honeypot
- suricata
- honeypot
The Security Analyst’s Guide to Suricata
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Kibana 5 Templates for Suricata IDPS
Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
Pure python parser for Snort/Suricata rules.
- suricata-rules
- suricata-rule
- snort-rules
- snort-rules-generate
A tools to work on suricata stats.log file.
Kibana 6 Templates for Suricata IDPS Threat Hunting
Local-LLM alert triage for self-hosted SOCs.
Command-line tool to format and syntax highlight Suricata rules
- python
- suricata