Daemon to ban hosts that cause multiple authentication errors
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Detect deauthentication frames using an ESP8266
BlockBlock provides continual protection by monitoring persistence locations.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
A Suricata Docker image.
- suricata
- ids
- nsm
- docker
BadActor.org An in-memory application driven jailer written in Go
Universal web application security sensor intended for real-time monitoring and defense.
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
A tool to catch spoofed NBNS responses.
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Local-LLM alert triage for self-hosted SOCs.
The repository host gives no description.
Deep network visibility, powered by Suricata. Artica integrates the Suricata IDS engine directly inside your server, giving you enterprise-grade intrusion detection without the complexity. Monitor every packet in real time, detect advanced threats, and visualize malicious
- appliance
- network-monitoring
- suricata