
auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
configuration-auditingdefensive-toolsintrusion-detection+2

A Linux Auditd rule set mapped to MITRE's Attack Framework

Pulled Pork for Snort and Suricata rule management (from Google code)