Download

Community Edition

Free for internal use. 10 protocol parsers included.

Quick start

Installation

# Install
sudo dpkg -i intrufend_2.4.310_amd64.deb
sudo apt-get install -f                     # install dependencies

# Download 49K+ community detection rules
sudo intrufend-update-rules

# Configure
sudo nano /etc/intrufend/config.yaml        # set capture interface

# Start
sudo systemctl start intrufend
sudo systemctl enable intrufend

System Requirements

Included Protocols

Need S7comm, IEC 104, EtherNet/IP, OPC UA, BACnet, and 58 more? OEM Edition

Build from Source

# Prerequisites
sudo apt-get install build-essential cmake pkg-config \
    libpcap-dev libyaml-dev libpcre2-dev rustc cargo

# Build
git clone https://github.com/intrufend/intrufend.git
cd intrufend
cd plugins && cargo build --release && cd ..
cmake -S . -B build && cmake --build build -j$(nproc)

# Test
./build/src/intrufend --self-test
./build/src/intrufend --replay test.pcap -c conf/config.yaml

Package Contents

/usr/bin/intrufend                    # IDS engine
/usr/bin/intrufend-update-rules       # Rule downloader
/usr/lib/intrufend/plugins/*.so       # 10 protocol parsers
/etc/intrufend/config.yaml            # Configuration
/etc/intrufend/rules/intrufend.yml    # 18 built-in OT/ICS rules
/lib/systemd/system/intrufend.service # Systemd unit
/var/log/intrufend/                   # Logs (eve.json)