Ids Python Packages

snowflake-id

The Snowflake generator done right.

sigmatools

Main Sigma Rule Repository

idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

suricata-update

The tool for updating your Suricata rules.

suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

ipradar2

Real-time detection and defense against malicious network activity and policy violations (exploits, port-scanners, advertising, telemetry, state surveillance, etc.)

threatbus

The missing link to connect open-source threat intelligence tools.

base-typed-id

Strict typed UUID identifier base classes with exact runtime subtype preservation and optional Pydantic v2 support.

threatbus-zeek

A plugin to enable threatbus communication with Zeek network monitor.

threatbus-inmem

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-misp

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

eis-sigmatools

Tools for the Generic Signature Format for SIEM Systems

threatbus-cif3

A plugin to enable indicators to be submitted to CIFv3 in real-time

threatbus-rabbitmq

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-zmq-app

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

stix-shifter-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-zmq

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

pyvast-threatbus

Connect the open source telemetry engine VAST with Threat Bus, the open source threat intelligence dissemination layer

suricata-threatbus

A simple ZMQ app to connect to Threat Bus and ingest indicators as Suricata rules via `suricatasc`

vast-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-vast

A plugin to enable threatbus communication with VAST.

nidsdata

NIDS Dataset

unipdb-mapper

UniProt ↔ PDB residue mapper

unified2

Pure-python parser for IDS unified2 binary log format