Skip to content

Instantly share code, notes, and snippets.

@christian-taillon
Created January 3, 2024 18:55
Show Gist options
  • Save christian-taillon/12e945256d3fb0c6a963adcc5b423da2 to your computer and use it in GitHub Desktop.
Save christian-taillon/12e945256d3fb0c6a963adcc5b423da2 to your computer and use it in GitHub Desktop.
# Suricata Rulesets URLs
- Corelight Labs Suricata Rules: [https://feed.corelight.com/corelight.rules](https://feed.corelight.com/corelight.rules)
- ET/Open: [https://rules.emergingthreats.net/open/suricata-6.0/emerging.rules.tar.gz](https://rules.emergingthreats.net/open/suricata-6.0/emerging.rules.tar.gz)
- ET/Pro: [https://rules.emergingthreatspro.com/<insert-et-pro-key-here>/suricata-6.0/etpro.rules.tar.gz](https://rules.emergingthreatspro.com/<insert-et-pro-key-here>/suricata-6.0/etpro.rules.tar.gz)
- etnetera/aggressive: [https://security.etnetera.cz/feeds/etn_aggressive.rules](https://security.etnetera.cz/feeds/etn_aggressive.rules)
- malsilo: [https://malsilo.gitlab.io/feeds/dumps/malsilo.rules.tar.gz](https://malsilo.gitlab.io/feeds/dumps/malsilo.rules.tar.gz)
- oisf/trafficid rules: [https://openinfosecfoundation.org/rules/trafficid/trafficid](https://openinfosecfoundation.org/rules/trafficid/trafficid)
- ptresearch/attackdetection: [https://raw.githubusercontent.com/ptresearch/AttackDetection/master/pt.rules.tar.gz](https://raw.githubusercontent.com/ptresearch/AttackDetection/master/pt.rules.tar.gz)
- scwx/enhanced: [https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-enhanced_latest.tgz](https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-enhanced_latest.tgz)
- scwx/malware: [https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-malware_latest.tgz](https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-malware_latest.tgz)
- scwx/security: [https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-security_latest.tgz](https://ws.secureworks.com/ti/ruleset/<insert-secret-code-here>/Suricata_suricata-security_latest.tgz)
- sslbl/js3-fingerprints: [https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules](https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules)
- sslbl/ssl-fp-blacklist: [https://sslbl.abuse.ch/blacklist/sslblacklist.rules](https://sslbl.abuse.ch/blacklist/sslblacklist.rules)
- tgreen/hunting: [https://raw.githubusercontent.com/travisbgreen/hunting-rules/master/hunting.rules](https://raw.githubusercontent.com/travisbgreen/hunting-rules/master/hunting.rules)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment