https://github.com/StamusNetworks/scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
https://github.com/StamusNetworks/scirius

cybersecurity detection gui interface management network-intrusion-detection network-security python security signatures suricata suricata-rules threat-hunting user-interface

Last synced: about 2 months ago
JSON representation

Scirius is a web application for Suricata ruleset management and threat hunting.

• Host: GitHub
• URL: https://github.com/StamusNetworks/scirius
• Owner: StamusNetworks
• License: gpl-3.0
• Created: 2014-05-04T19:15:32.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2024-04-13T14:32:32.000Z (5 months ago)
• Last Synced: 2024-04-14T15:47:41.760Z (5 months ago)
• Topics: cybersecurity, detection, gui, interface, management, network-intrusion-detection, network-security, python, security, signatures, suricata, suricata-rules, threat-hunting, user-interface
• Language: Python
• Homepage:
• Size: 11.9 MB
• Stars: 587
• Watchers: 55
• Forks: 149
• Open Issues: 117
• Metadata Files:
  • Readme: README.rst
  • License: LICENSE

Awesome Lists containing this project

• awesome-suricata - Scirius - Web application for Suricata ruleset management and threat hunting. (Rule/Security Content Management and Handling)

README

        
=======

Scirius

=======

Introduction

============

Scirius Community Edition is a web interface dedicated to Suricata ruleset management.

It handles the rules file and update associated files.

.. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/suricata-index.png

    :alt: Suricata page

    :align: center

Scirius CE is developed by `Stamus Networks `_ and is available under the

GNU GPLv3 license.

Features

========

Scirius can build Suricata ruleset composed of different sources. Sources or feeds can be picked from public sources

published by `OISF `_ or can be custom.

.. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/public-sources.png

    :alt: public sources from OISF

    :align: center

Scirius will take care of refreshing the sources and composing the ruleset by applying your transformation

on it.

.. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/ruleset.png

    :alt: Ruleset with 5 sources

    :align: center

Transformations like disabling a rule or applying a threshold (to lower the noise only) can be made

for each rule or at the category level.

.. image:: https://github.com/StamusNetworks/scirius/raw/master/doc/images/rule-page.png

    :alt: Rule page

    :align: center

Scirius also presents statistics on rules activity to give information and facilitate the tuning.

Get Help

========

Documentation

-------------

`Scirius Documentation `_ is on readthedocs.

Support

-------

You can join IRC #SELKS channel on `irc.freenode.net `_ to get help.

You can also ask Scirius related questions on `SELKS Forum `_.

Report an issue

---------------

You can report an issue on `GitHub issue page `_.

Contributing

============

From improving the documentation to coding new features, there is more than one way to contribute to Scirius. And for

all contributions please use a `Pull Request `_ on Github.