shrike

KO | EN

gitlite — search

#react #ai #llm #golang #go #android #deep-learning #docker #windows #awesome #pytorch #ios #openai #open-source

(★ 18)

Resolve URL or refering site based on alert or http log match in eve log output from suricata submit to Cuckoo as url task

shrike 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

shrike
======
From http://en.wikipedia.org/wiki/Shrike
"Shrikes are known for their habit of catching insects and small vertebrates and impaling their bodies on thorns, the spikes on barbed-wire fences or any available sharp point. This helps them to tear the flesh into smaller, more conveniently-sized fragments, and serves as a cache so that the shrike can return to the uneaten portions at a later time."

What it does:
Resolve URL or refering site based on alert or http log match in suricata eve log. Perform a very simple and dumb hash of either 4 tuple or ip pair and search a configured amount of in memory buffered http log entries. Submit url,referer,landing to Cuckoo as url task. This is alpha code. Shrike takes a single argument to a json configuration file. See code for sample suricata eve config.

If Munging together a bunch of RE's for performance you may want to look at reass.pl as stolen from here http://blog.spiderlabs.com/2007/06/optimizing-regular-expressions.html

./reass.pl packs.txt

shrike

shrike 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

shrike

shrike 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README