Snort

Snort++

Snort 3 is the next generation Snort IPS with enhanced features and improved cross-platform support.

ThreatAggregator

Aggregates security threats from online sources and outputs to various formats.

FireEye Mandiant SunBurst Countermeasures

FireEye Mandiant SunBurst Countermeasures: freely available rules for detecting malicious files and activity

FireEye Red Team Tool Countermeasures

A set of rules for detecting threats in various formats, including Snort, Yara, ClamAV, and HXIOC.

Malware Indicators of Compromise

Provides indicators of compromise (IOCs) to combat malware with Yara and Snort rules.

Detection and Hunting Signatures

A set of interrelated detection rules for improving detection and hunting visibility and context

SIREN Setup Instructions

Instructions for setting up SIREN, including downloading Linux dependencies, cloning the repository, setting up virtual environment, installing pip requirements, running SIREN, setting up Snort on Pi, and MySQL setup.