
signatures
Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma
curated-resourcesdefensive-toolsdevsecops+3
27

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma

CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…