ptresearch/AttackDetection resource

Health v2 · maintenance only

Flags: no_releases archived no_license

Adoption not part of the score

1357 stars · 354 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of Suricata IDS rules, PoC exploits, and network traffic samples from Positive Technologies' Attack Detection Team. The ruleset targets detection of vulnerabilities, 0-days, malware, and attacker TTPs at the network layer.

Use cases

• detect network exploitation attempts with suricata rules
• find ids rules for known cves and 0-days
• get pcap traffic samples to test intrusion detection
• improve network-layer detection of malware c2 traffic
• reproduce vulnerabilities and verify detection coverage

When to choose

• you run Suricata and want community rules covering recent vulnerabilities and attacker TTPs
• you need PoC exploits and traffic samples to validate IDS coverage
• you research network-based detection of exploits and malware

When to avoid

• you use an IDS other than Suricata without rule conversion
• you need a supported, SLA-backed commercial ruleset
• you want endpoint rather than network detection

Facets

dataset · maturity maintenance

security monitoring vulnerability-scanning security penetration-testing networking self-hosted suricata intrusion-detection network-detection ids-rules poc-exploits threat-detection pcap-samples linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ptresearch/AttackDetection")