Credits
SO-CRATES is built on many excellent open-source projects and freely available rule/data feeds:
| Project | License | Purpose |
|---|---|---|
| Suricata | GPL-2.0-only | Network traffic analysis and IDS |
| Zircolite | LGPL-3.0-only | Sigma rule detection for log files |
| YARA | BSD-3-Clause | Malware pattern matching |
| SigmaHQ Rules | Detection Rule License (DRL) 1.1 | Detection logic for log analysis |
| YARA Forge | Various | Curated YARA rules |
| Security Onion Playbooks | Custom | Pre-generated AI investigation guidance for Suricata/Sigma alerts |
| Security Onion AI Summaries | Custom | Pre-generated AI rule summaries for Suricata/Sigma/YARA alerts |
| Emerging Threats Open | MIT | Suricata network rules (default) |
| Suricata Traffic ID | MIT | Suricata network rules (optional) |
| Abuse.ch SSL Blacklist | CC0-1.0 | Suricata network rules (optional) |
| Abuse.ch JA3 Fingerprints | CC0-1.0 | Suricata network rules (optional) |
| Abuse.ch Feodo Tracker | CC0-1.0 | Suricata network rules (optional) |
| Abuse.ch URLhaus | CC0-1.0 | Suricata network rules (optional) |
| Etnetera Aggressive IP Blacklist | MIT | Suricata network rules (optional) |
| Positive Technologies PT Rules (Open) | Custom | Suricata network rules (optional) |
| PAW Patrules | CC-BY-SA-4.0 | Suricata network rules (optional) |
| IPFire DBL | CC-BY-SA-4.0 | Suricata network rules (optional) |
| Stamus Lateral Movement | GPL-3.0-only | Suricata network rules (optional) |
| Threat Hunting Rules (tgreen) | GPL-3.0-only | Suricata network rules (optional) |
| NMAP Scan Detection | MIT | Suricata network rules (optional) |
| Antiphishing | GPL-3.0-only | Suricata network rules (optional) |
| The Hunter's Ledger | CC-BY-4.0 | Suricata network rules (optional) |
| D3 | ISC | Sankey diagram visualization |
| d3-sankey | BSD-3-Clause | Sankey diagram layout |
| CyberChef | Apache-2.0 | Built-in data decoding and analysis (pivot-menu lookup, Send to CyberChef) |
| tcpdump | BSD-3-Clause | Stream/hexdump carving |
| Wireshark/tshark | GPL-2.0-only | ASCII transcript extraction |
| ExifTool | Perl Artistic License / GPL | EXIF/media metadata extraction |
| file | BSD-2-Clause-alike | MIME/file-type detection |
Documentation Site
This documentation site and its splash page are built with:
| Project | License | Purpose |
|---|---|---|
| MkDocs | BSD-2-Clause | Documentation site generator |
| Material for MkDocs | MIT | Documentation site theme |
| GLightbox / mkdocs-glightbox | MIT | Image lightbox for screenshots |
| Orbitron | OFL-1.1 | Splash page font (Google Fonts) |
| Rajdhani | OFL-1.1 | Splash page font (Google Fonts) |
Artwork
The SO-CRATES statue artwork (socrates.jpg, shown in the welcome window and on the docs splash page) is AI-generated for this project.