Suricata Python Packages

parsuricata

Parse Suricata rules

idstools

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

tenzir

Tenzir is the data pipeline engine for security teams.

suricata-update

The tool for updating your Suricata rules.

pyvast

Tenzir is the data pipeline engine for security teams.

mcp-server-malcolm

Ask an AI agent about your Malcolm network traffic. MCP server for Zeek, Suricata, Arkime and NetBox data, read-only until you opt in to writes.

suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

dynamite-nsm

DynamiteNSM is a free Network Security Monitor to enable network visibility and advanced cyber threat detection

ids-rule-converter

Translate Snort and Suricata rules without losing what they mean. A fail-safe, engine-tested IDS conversion and analysis toolkit.

pytenzir

Tenzir is the data pipeline engine for security teams.

security-shallots

Small-footprint AI security scout for homelabs & small networks (1-10 machines). SIEM/NSM value without the 200GB data lake, runs on a Raspberry Pi.

suricata-prettifier

Command-line tool to format and syntax highlight Suricata rules

ruledownloader

Tool for downloading and archiving Snort and Suricata rules. This project was formerly abandoned, I just slapped some lipstick on the pig and brought it back