├── .gitignore ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── config_example.json ├── install.sh ├── pyproject.toml ├── rids.service ├── rids ├── __init__.py ├── event.py ├── ioc_formats │ ├── __init__.py │ ├── allowed_sni_port.py │ └── bad_ip_list.py ├── iocs.py ├── monitors │ ├── __init__.py │ ├── ip_monitor.py │ ├── tls_monitor.py │ └── tshark.py ├── rids.py └── rules │ ├── __init__.py │ ├── ip_matcher.py │ ├── ruleset.py │ └── tls_matcher.py └── tests ├── __init__.py ├── ip_matcher_test.py └── tls_matcher_test.py /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/.gitignore -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/README.md -------------------------------------------------------------------------------- /config_example.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/config_example.json -------------------------------------------------------------------------------- /install.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/install.sh -------------------------------------------------------------------------------- /pyproject.toml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/pyproject.toml -------------------------------------------------------------------------------- /rids.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids.service -------------------------------------------------------------------------------- /rids/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /rids/event.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/event.py -------------------------------------------------------------------------------- /rids/ioc_formats/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /rids/ioc_formats/allowed_sni_port.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/ioc_formats/allowed_sni_port.py -------------------------------------------------------------------------------- /rids/ioc_formats/bad_ip_list.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/ioc_formats/bad_ip_list.py -------------------------------------------------------------------------------- /rids/iocs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/iocs.py -------------------------------------------------------------------------------- /rids/monitors/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /rids/monitors/ip_monitor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/monitors/ip_monitor.py -------------------------------------------------------------------------------- /rids/monitors/tls_monitor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/monitors/tls_monitor.py -------------------------------------------------------------------------------- /rids/monitors/tshark.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/monitors/tshark.py -------------------------------------------------------------------------------- /rids/rids.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/rids.py -------------------------------------------------------------------------------- /rids/rules/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /rids/rules/ip_matcher.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/rules/ip_matcher.py -------------------------------------------------------------------------------- /rids/rules/ruleset.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/rules/ruleset.py -------------------------------------------------------------------------------- /rids/rules/tls_matcher.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/rids/rules/tls_matcher.py -------------------------------------------------------------------------------- /tests/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /tests/ip_matcher_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/tests/ip_matcher_test.py -------------------------------------------------------------------------------- /tests/tls_matcher_test.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Jigsaw-Code/rids/HEAD/tests/tls_matcher_test.py --------------------------------------------------------------------------------