Suricata IDS alert triage and EVE JSON log correlation with rule tuning to reduce false positives
-
Updated
Feb 2, 2026 - Python
#
eve-json
Here are 2 public repositories matching this topic...
Passive network asset intelligence from Suricata. Every device, user, service and certificate from eve.json — no agents, no scanning, no ELK. Works with OPNsense, pfSense, Docker.
golang self-hosted opnsense suricata ids network-monitoring infosec pfsense nsm ips ndr network-security security-tools asset-discovery network-visibility device-fingerprinting asset-inventory shadow-it passive-scanning eve-json
-
Updated
Aug 3, 2026 - Go
Improve this page
Add a description, image, and links to the eve-json topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the eve-json topic, visit your repo's landing page and select "manage topics."