Alternatives and similar repositories for bro:

Users that are interested in bro are comparing it to the libraries listed below

• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 8 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• malware-kitten / bro_scripts
  A collection of bro_scripts and signatures
  ☆26Updated 5 years ago
• gitunique / bro-scripts
  Collection of bro scripts
  ☆9Updated 9 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• brad-anton / brand_watch
  Use OpenDNS's investigate API to find newly observed domains which match a brand or string
  ☆17Updated 8 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• hosom / bro-phishing
  Detect Phishing with Bro IDS
  ☆18Updated 8 years ago
• initconf / brocon-15
  brocon-15 scripts
  ☆13Updated 7 years ago
• jheise / threatcmd
  Cli interface to threatcrowd.org
  ☆19Updated 7 years ago
• mpars0ns / maltego_censys
  Basic Maltego Transforms for looking up SSL certs and IP info from censys.io
  ☆41Updated 7 years ago
• hadojae / redonion
  **BETA** A simple buildscript for network security monitoring on RHEL/CentOS
  ☆31Updated 7 years ago
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆28Updated 10 years ago
• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• opensourcesec / malstrom
  Cyber Intel Management
  ☆48Updated 7 years ago
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 5 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 9 years ago
• MISP / MISPego
  Maltego Transform to put entities into MISP events
  ☆26Updated 3 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• lruppert / bro-scripts
  Utilities and scripts for bro-ids
  ☆22Updated 11 years ago
• initconf / scan-NG
  scan-detection policies for bro
  ☆15Updated last month
• slacker007 / Bro-NetworkSecurityMonitoring
  collection of bro and bash scripts that when run from the same directory on Linux distro with bro installed, will pull information such a…
  ☆12Updated 8 years ago
• hempnall / broyara
  integrating bro into yara
  ☆33Updated 10 years ago
• jonschipp / bro-scripts
  A collection of Bro scripts I've written
  ☆40Updated 9 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 7 years ago
• tom8941 / MISP-IOC-Validator
  Validate IOC from MISP ; Export results and iocs to SIEM and sensors using syslog and CEF format
  ☆14Updated 8 years ago
• PidgeyL / MISP-Extractor
  Extract information from MISP via the API
  ☆15Updated 8 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆47Updated 11 years ago
• exp0se / bro-intel-generator
  Script for generating Bro intel files from pdf or html reports
  ☆76Updated 9 years ago
• hosom / bro-scripts
  Bro stuff.
  ☆12Updated 8 years ago