Detection and Hunting Signatures Logo

Detection and Hunting Signatures

0
Free
Visit Website

A set of interrelated network and host detection rules with the aim of improving detection and hunting visibility and context. Where applicable, each Snort rule includes metadata indicating the corresponding Yara and ClamAV rules, and each Yara signature also includes metadata to the corresponding Snort and ClamAV rules, and so on. Supported Rules Currently, Snort 3, Yara and ClamAV rules are supported. Additional singatures and formats are work in progress. Scripts Currently, only scripts available are used to aid in auto-generation of hash-based and certificate-based Yara rules.

FEATURES

ALTERNATIVES

Identify unintended network access to AWS resources and ensure network security by analyzing network reachability conditions.

Comprehensive guide for Iptables configuration and firewall rules.

Tool for setting up Glutton, a cybersecurity tool for monitoring SSH traffic.

A utility for splitting packet traces along TCP connection boundaries.

A simple honeypot that opens a listening socket and waits for connection attempts, with configurable reply and event handling

Impost is a powerful network security auditing tool with honey pot and packet sniffer capabilities.

Akamai Guardicore Segmentation is a microsegmentation tool that provides network visibility, policy creation, and enforcement to prevent lateral movement and protect critical assets in diverse IT environments.

A multi-threaded intrusion detection system using Yara for network and stream IDS