Skip to content

just sets up a docker container for testing zeek scrtips, suricata and yara rules

Notifications You must be signed in to change notification settings

ratfink417/de_testing_tools

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 

Repository files navigation

when this thing is in a fully working state....

you should be able to use this container standalone from your terminal by running docker compose up from inside the root folder of this repository or use the dockerfile as a gitlab runner for ci/cd

any logs or extracted files resulting from a test can be found in the artifacts folder for the type of rule or scipt you are testing ie artifacts/{suricata,zeek,yara}

if your test was meant to extract files from pcap, it should be placed in artifacts/files

any pcap or files you would like added to the container for you to run tests against should be placed in the artifacts/{files,pcap} folders

About

just sets up a docker container for testing zeek scrtips, suricata and yara rules

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published