🦀 ClawHub
Suricata IDS Monitor
by @infectit007
Read and triage Suricata IDS/IPS alerts from eve.json into a structured threat report — severity-ranked findings, attacker IPs, top triggered signatures, and...
⚙️ Configuration
Suricata must be running and writing to eve.json:
# Verify log exists and is being written
ls -lh /var/log/suricata/eve.json
tail -5 /var/log/suricata/eve.json | python3 -m json.tool
If the log is permission-denied:
sudo chmod 644 /var/log/suricata/eve.json
TERMINAL
clawhub install suricata-monitor