├── .idea ├── .name ├── encodings.xml ├── misc.xml ├── modules.xml ├── rulecat.iml ├── vcs.xml └── workspace.xml ├── README.md ├── app ├── app.go ├── customfuc.go └── engine.go ├── doc ├── README.md └── rules_tpl │ ├── 1.yml │ ├── 2.yml │ ├── 3.yml │ ├── 4.yml │ └── 5.yml ├── etc ├── config.yml ├── nids-flow_rules │ ├── 1.yml │ ├── 2.yml │ ├── 3.yml │ └── 4.yml ├── topic_tpl2_rules │ ├── 1.yml │ ├── 2.yml │ ├── 3.yml │ └── 4.yml └── topic_tpl_rules │ ├── 1.yml │ ├── 2.yml │ ├── 3.yml │ └── 4.yml ├── go.mod ├── go.sum ├── img.png ├── main.go ├── test ├── cache.go ├── engine.go ├── json.go └── yaml.go └── utils ├── cache └── cache.go ├── email └── email.go ├── es ├── elastic6.go ├── elastic7.go └── es.go ├── json └── json.go ├── kafka ├── consumer.go └── producer.go ├── log └── log.go ├── utils.go └── workerpool └── workerpool.go /.idea/.name: -------------------------------------------------------------------------------- 1 | rulecat -------------------------------------------------------------------------------- /.idea/encodings.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/encodings.xml -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/misc.xml -------------------------------------------------------------------------------- /.idea/modules.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/modules.xml -------------------------------------------------------------------------------- /.idea/rulecat.iml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/rulecat.iml -------------------------------------------------------------------------------- /.idea/vcs.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/vcs.xml -------------------------------------------------------------------------------- /.idea/workspace.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/.idea/workspace.xml -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/README.md -------------------------------------------------------------------------------- /app/app.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/app/app.go -------------------------------------------------------------------------------- /app/customfuc.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/app/customfuc.go -------------------------------------------------------------------------------- /app/engine.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/app/engine.go -------------------------------------------------------------------------------- /doc/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/README.md -------------------------------------------------------------------------------- /doc/rules_tpl/1.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/rules_tpl/1.yml -------------------------------------------------------------------------------- /doc/rules_tpl/2.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/rules_tpl/2.yml -------------------------------------------------------------------------------- /doc/rules_tpl/3.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/rules_tpl/3.yml -------------------------------------------------------------------------------- /doc/rules_tpl/4.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/rules_tpl/4.yml -------------------------------------------------------------------------------- /doc/rules_tpl/5.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/doc/rules_tpl/5.yml -------------------------------------------------------------------------------- /etc/config.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/config.yml -------------------------------------------------------------------------------- /etc/nids-flow_rules/1.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/nids-flow_rules/1.yml -------------------------------------------------------------------------------- /etc/nids-flow_rules/2.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/nids-flow_rules/2.yml -------------------------------------------------------------------------------- /etc/nids-flow_rules/3.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/nids-flow_rules/3.yml -------------------------------------------------------------------------------- /etc/nids-flow_rules/4.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/nids-flow_rules/4.yml -------------------------------------------------------------------------------- /etc/topic_tpl2_rules/1.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl2_rules/1.yml -------------------------------------------------------------------------------- /etc/topic_tpl2_rules/2.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl2_rules/2.yml -------------------------------------------------------------------------------- /etc/topic_tpl2_rules/3.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl2_rules/3.yml -------------------------------------------------------------------------------- /etc/topic_tpl2_rules/4.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl2_rules/4.yml -------------------------------------------------------------------------------- /etc/topic_tpl_rules/1.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl_rules/1.yml -------------------------------------------------------------------------------- /etc/topic_tpl_rules/2.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl_rules/2.yml -------------------------------------------------------------------------------- /etc/topic_tpl_rules/3.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl_rules/3.yml -------------------------------------------------------------------------------- /etc/topic_tpl_rules/4.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/etc/topic_tpl_rules/4.yml -------------------------------------------------------------------------------- /go.mod: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/go.mod -------------------------------------------------------------------------------- /go.sum: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/go.sum -------------------------------------------------------------------------------- /img.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/img.png -------------------------------------------------------------------------------- /main.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/main.go -------------------------------------------------------------------------------- /test/cache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/test/cache.go -------------------------------------------------------------------------------- /test/engine.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/test/engine.go -------------------------------------------------------------------------------- /test/json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/test/json.go -------------------------------------------------------------------------------- /test/yaml.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/test/yaml.go -------------------------------------------------------------------------------- /utils/cache/cache.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/cache/cache.go -------------------------------------------------------------------------------- /utils/email/email.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/email/email.go -------------------------------------------------------------------------------- /utils/es/elastic6.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/es/elastic6.go -------------------------------------------------------------------------------- /utils/es/elastic7.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/es/elastic7.go -------------------------------------------------------------------------------- /utils/es/es.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/es/es.go -------------------------------------------------------------------------------- /utils/json/json.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/json/json.go -------------------------------------------------------------------------------- /utils/kafka/consumer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/kafka/consumer.go -------------------------------------------------------------------------------- /utils/kafka/producer.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/kafka/producer.go -------------------------------------------------------------------------------- /utils/log/log.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/log/log.go -------------------------------------------------------------------------------- /utils/utils.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/utils.go -------------------------------------------------------------------------------- /utils/workerpool/workerpool.go: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/njcx/RuleCat/HEAD/utils/workerpool/workerpool.go --------------------------------------------------------------------------------