1 dépôt
Detection engines that execute custom Lua scripts from rules and output modules to extend detection and formatting logic.
Distinct from Lua: Distinct from Lua: focuses on using Lua as an extension mechanism within a detection engine, not the language itself.
Explore 1 awesome GitHub repository matching programming languages & runtimes · Scriptable Detection Engines. Refine with filters or upvote what's useful.
Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in real-time to identify and alert on malicious activity. It operates as a rule-based threat detection system, matching traffic against user-defined signatures to detect known attack patterns and policy violations, and can be placed inline to actively block malicious packets before they reach their target. The engine inspects a wide range of application-layer protocols including HTTP, DNS, TLS, SMB, and MQTT, and supports high-performance packet capture through specialized hardware a
Extends detection and output logic by executing custom Lua scripts from rules and output modules.