Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Repository Index
47,133 repositories indexed
1–24 of 60 · Most stars
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
A Suricata based NDR distribution
- suricata
- network
- security
- monitoring
Tenzir is the data pipeline engine for security teams.
- incident-response
- threathunting
- siem
- soc
Scirius is a web application for Suricata ruleset management and threat hunting.
- python
- security
- management
- interface
Suricata, Snort and Zeek IDS rule and pcap testing system
Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
- security
- netsec
- suricata
- ids
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
A Suricata Docker image.
- suricata
- ids
- nsm
- docker
Suricata Extreme Performance Tuning guide
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
Suricata Extreme Performance Tuning guide - Mark II
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)
- moloch
- suricata
- monitoring
- nsm
Web interface to explore Suricata EVE outputs
- attack-defense-ctf
- ctf
- network-monitor
- suricata
Wireshark plugin to display Suricata analysis info
Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and auto-completion to your preferred editor once it is configured.
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
Templates for Kibana/Logstash to use with Suricata IDPS
RDP honeypot
- suricata
- honeypot
The Security Analyst’s Guide to Suricata
fast, extensible, versatile event router for Suricata's EVE-JSON format
- suricata
- eve
- json
- golang
Kibana 7 Templates for Suricata IDPS Threat Hunting