AttackDetection

The ptresearch/AttackDetection repository provides a collection of Suricata rules designed to detect network-layer attacks, including malware and exploitation techniques, as well as proof-of-concept (PoC) exploits for identified vulnerabilities. Notable features include dedicated rules for detecting TLS communications, structured organization of rules and traffic samples, and a specific SID range for easy integration with Suricata deployments.