SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!
Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus
A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing alerts, metadata, transcripts, and hexdumps.
📖 Full documentation: https://so-crates.org/
See AGENTS.md for agent-focused guidance on maintaining SO-CRATES, including updating vendored dependencies.
# All tests
python3 -m unittest discover -v
See LICENSE