https://github.com/0xtf/suricatasidmap
Global SidMap of Suricata rulesets
https://github.com/0xtf/suricatasidmap
Last synced: 4 months ago
JSON representation
Global SidMap of Suricata rulesets
- Host: GitHub
- URL: https://github.com/0xtf/suricatasidmap
- Owner: 0xtf
- Created: 2020-02-20T19:21:28.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2020-03-16T11:42:40.000Z (over 6 years ago)
- Last Synced: 2025-08-13T22:47:20.509Z (10 months ago)
- Size: 111 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SuricataSidMap
**SuricataSidMap** is a global sidmap of all public Suricata rulesets *(aprox 93.000 rules)*. It can be used as a manual reference file or to feed a system. Commercial rulesets that make their sidmap available are also included.
# Where do I get it?
* https://lawmaker.cloud/signatures.txt (updated daily)
# Rulesets
The following are the rulesets present in the sidmap. If I missed something, feel free to let me know.
* [Emerging Threats Pro](https://rules.emergingthreats.net/sidmap/complete-sidmap.txt) *(we don't generate a sidmap of the ruleset itself, but rather use what ET makes [available](https://rules.emergingthreats.net/sidmap/complete-sidmap.txt))*
* [Abuse.ch TLS](https://sslbl.abuse.ch/blacklist/sslblacklist_tls_cert.rules)
* [Abuse.ch JA3](https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules)
* [Abuse.ch IP Blacklist](https://sslbl.abuse.ch/blacklist/sslipblacklist.rules)
* [Abuse.ch URLhaus](https://urlhaus.abuse.ch/downloads/ids)
* [Travis Green Hunting](https://raw.githubusercontent.com/travisbgreen/hunting-rules/master/hunting.rules)
* [OISF Traffic ID](https://openinfosecfoundation.org/rules/trafficid/trafficid.rules)
* [PT Research Attack Detection](https://github.com/ptresearch/AttackDetection/)
# Parsing for easier viewing
The file does not contain line breaks. If you're using vim and want to parse the file to include them, you can use the following command:
```
:%!python -m json.tool
```
# Ruleset Navigator
I'll release a web rule/ruleset navigator soon.