1 repository
Writes detection rules using Lua scripting to inspect packet payloads and match custom patterns.
Distinct from Custom Detection Rules: Distinct from Custom Detection Rules: uses Lua scripting for rule logic, not just pattern definitions.
Explore 1 awesome GitHub repository matching security & cryptography · Lua Detection Rules. Refine with filters or upvote what's useful.
Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in real-time to identify and alert on malicious activity. It operates as a rule-based threat detection system, matching traffic against user-defined signatures to detect known attack patterns and policy violations, and can be placed inline to actively block malicious packets before they reach their target. The engine inspects a wide range of application-layer protocols including HTTP, DNS, TLS, SMB, and MQTT, and supports high-performance packet capture through specialized hardware a
Writes detection rules using Lua scripting to inspect packet payloads and match custom patterns.