Zeek-Formatted Threat Intelligence Feeds
☆405Oct 26, 2026Updated this week
Alternatives and similar repositories for Zeek-Intelligence-Feeds
Users that are interested in Zeek-Intelligence-Feeds are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Standard-Format Threat Intelligence Feeds☆135Updated this week
- A set of Zeek scripts to detect ATT&CK techniques.☆625Jun 26, 2024Updated 2 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆41Aug 18, 2022Updated 4 years ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆270Mar 17, 2023Updated 3 years ago
- Log4j Exploit Detection Logic for Zeek☆19Oct 13, 2026Updated 2 weeks ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Zeek support for Community ID flow hashing.☆37Jul 11, 2023Updated 3 years ago
- Automatically created C2 Feeds☆749Updated this week
- Open source endpoint agent providing host information to Zeek. [v2]☆92Sep 23, 2026Updated last month
- Corelight or Zeek Elastic Common Schema Templates☆11Oct 22, 2026Updated last week
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆123Jul 12, 2021Updated 5 years ago
- Actionable analytics designed to combat threats☆1,008May 25, 2022Updated 4 years ago
- Zeek package to create JSON formatted logs to stream into data analysis systems.☆31Dec 3, 2025Updated 10 months ago
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆969Updated this week
- Industrial Control Systems Network Protocol Parsers☆206Oct 22, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Enables Zeek to communicate with Tenzir☆11Jul 20, 2023Updated 3 years ago
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 10 months ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆35Oct 22, 2026Updated last week
- Detect Tactics, Techniques & Combat Threats☆2,354Oct 19, 2026Updated last week
- Your Everyday Threat Intelligence☆2,038Updated this week
- Extract and aggregate threat intelligence.☆933May 26, 2026Updated 5 months ago
- Repository of YARA rules made by Trellix ATR Team☆631Mar 18, 2025Updated last year
- Real-time, container-based file scanning at enterprise scale☆1,005Oct 24, 2026Updated last week
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Zeek plugin to generate data on per-packet sizes and intervals☆14Apr 21, 2020Updated 6 years ago
- Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.☆470Oct 9, 2026Updated 3 weeks ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆121Mar 4, 2026Updated 7 months ago
- Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…☆130Sep 24, 2023Updated 3 years ago
- zeek-scripts☆44Dec 27, 2018Updated 7 years ago
- Indicators of Compromises (IOC) of our various investigations☆1,993Oct 22, 2026Updated last week
- Zeek Modbus Extension Scripts - CISA ICSNPP☆23Oct 17, 2026Updated 2 weeks ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,086Oct 5, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Awesome list of keywords and artifacts for Threat Hunting sessions☆682Aug 4, 2025Updated last year
- Zeek DNP3 Extension Scripts - CISA ICSNPP☆14Aug 5, 2026Updated 2 months ago
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,704Jan 12, 2026Updated 9 months ago
- IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.☆1,142Apr 28, 2026Updated 6 months ago
- Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards☆47May 30, 2024Updated 2 years ago
- Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark☆456Jun 1, 2026Updated 4 months ago
- Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.☆1,438Updated this week