Tools

taisa456/network-security-snort

Snort 3 IDS → IPS lab on Kali. Custom detection rules + iptables enforcement against ICMP recon, Nmap SYN scans, Hydra FTP brute force, and vsftpd…

trnguyen03/activemq-ids-ips-lab

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

arpsyndicate/suricata-vedas

VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs

deepfence/packetstreamer

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

c3rb3ru5d3d53c/signatures

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

snorby/snorby

Ruby On Rails Application For Network Security Monitoring

mandiant/heyserial

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types

mvlnetdev/cve-2021-31166-detection-rules

Different rules to detect if CVE-2021-31166 is being exploited

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

nccgroup/ip-reputation-snort-rule-generator

A tool to generate Snort rules based on public IP reputation data