Tools

Aristotle

  • Aristotle is a Python script and library for the viewing and filtering of Suricata and Snort rulesets based on interpreted key-value pairs present in the metadata keyword within each rule.
  • https://github.com/secureworks/aristotle