{"id":13530639,"url":"https://github.com/klingerko/nids-rule-library","last_synced_at":"2025-04-01T18:32:09.269Z","repository":{"id":41402929,"uuid":"201604401","full_name":"klingerko/nids-rule-library","owner":"klingerko","description":"Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)","archived":false,"fork":false,"pushed_at":"2023-07-24T14:29:59.000Z","size":4,"stargazers_count":20,"open_issues_count":0,"forks_count":5,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-11-02T17:36:24.394Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/klingerko.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2019-08-10T08:48:34.000Z","updated_at":"2024-10-23T10:01:01.000Z","dependencies_parsed_at":"2024-04-14T16:01:34.555Z","dependency_job_id":"0a48c889-ffae-4ae3-bd1d-bc3a7b7b9d46","html_url":"https://github.com/klingerko/nids-rule-library","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/klingerko%2Fnids-rule-library","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/klingerko%2Fnids-rule-library/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/klingerko%2Fnids-rule-library/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/klingerko%2Fnids-rule-library/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/klingerko","download_url":"https://codeload.github.com/klingerko/nids-rule-library/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246691686,"owners_count":20818554,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T07:00:52.822Z","updated_at":"2025-04-01T18:32:09.029Z","avatar_url":"https://github.com/klingerko.png","language":null,"funding_links":[],"categories":["Rule Sets and Lists"],"sub_categories":[],"readme":"# nids-rule-library\n\n## Collection of various open-source and commercial rulesets for NIDS (especially for Suricata and Snort)\n\n### Motivation\n\nThis project collects various open-source and commercial available rulesets for NIDS (network intrustion detection systems), especially for Suricata and Snort. The goal of this library is to get an easy overview of various rule sources/providers. \n\n### Contribution\n\nIf you would like to add a source you can simply create an issue or a merge request.\n\n### Rulesets\n\n#### Suricata\n\n* [Proofpoint/Emerging Threats ET Open ruleset](https://rules.emergingthreats.net/open/suricata/rules/)\n* [Proofpoint/Emerging Threats ET PRO ruleset](https://www.proofpoint.com/au/products/et-pro-ruleset)\n* [Attack Detection from Positive Technologies](https://github.com/ptresearch/AttackDetection)\n* [ABUSE CH SSL TLS Cert Blacklist](https://sslbl.abuse.ch/blacklist/sslblacklist_tls_cert.rules)\n* [ABUSE CH JA3 Fingerprints](https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules)\n* [ABUSE CH SSL IP Blacklist](https://sslbl.abuse.ch/blacklist/sslipblacklist.rules)\n* [ABUSE CH URLhaus](https://urlhaus.abuse.ch/downloads/ids)\n* [Etnetera IP blacklist](https://security.etnetera.cz/feeds/etn_aggressive.rules)\n* [Quandrantsec Sagan ruleset](https://github.com/beave/sagan-rules/)\n* [Travis Green Threat Hunting ruleset](https://raw.githubusercontent.com/travisbgreen/hunting-rules/master/hunting.rules)\n* [SecureWorks Security/Malware ruleset](https://www.secureworks.com/contact/)\n* [OISF Traffic ID rules](https://openinfosecfoundation.org/rules/trafficid/trafficid.rules)\n* CrowdStrike\n* [Stamus Networks](https://www.stamus-networks.com/blog/new-open-ruleset-for-detecting-lateral-movement-with-suricata)\n\nPlease also check [Suriata-Update's](https://github.com/OISF/suricata-update/) rule index for more sources.\n\n#### Snort \n\n* [Talos Snort Ruleset](https://www.snort.org/talos)\n* [Proofpoint/Emerging Threats ET Open ruleset](https://rules.emergingthreats.net/open/snort-2.9.0/rules/)\n* [Proofpoint/Emerging Threats ET PRO ruleset](https://www.proofpoint.com/au/products/et-pro-ruleset)\n* CrowdStrike\n\n#### Other feeds\n\n* [Bambenek OSINT C2 domain list](https://osint.bambenekconsulting.com/feeds/c2-dommasterlist.txt)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fklingerko%2Fnids-rule-library","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fklingerko%2Fnids-rule-library","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fklingerko%2Fnids-rule-library/lists"}