[THUGS(red)]

THUGS(red) Suricata Rules

Detection rules for Suricata, written from what we actually see in the wild.

Tooling live
suricata-rules.thugs.red open ↗

IDS rules derived from our own telemetry and research. Detection content is only as good as the traffic it was written against, and ours comes from honeypots and real incidents.

suricata ids detection blue-team

go to suricata-rules.thugs.red