Alternatives and similar repositories for bro:

Users that are interested in bro are comparing it to the libraries listed below

• thnyheim / misp2bro
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Updated 8 years ago
• pun1sh3r / iocminion
  Just another tool to extract Indicator of compromise (ioc) from files
  ☆29Updated 9 years ago
• malware-kitten / bro_scripts
  A collection of bro_scripts and signatures
  ☆26Updated 5 years ago
• gitunique / bro-scripts
  Collection of bro scripts
  ☆9Updated 9 years ago
• jshlbrd / laikaboss-modules
  ☆17Updated 7 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆30Updated 9 years ago
• hosom / bro-phishing
  Detect Phishing with Bro IDS
  ☆18Updated 8 years ago
• sooshie / scrape_pdf
  Python script to pull various IOCs from PDFs
  ☆15Updated 10 years ago
• brad-anton / brand_watch
  Use OpenDNS's investigate API to find newly observed domains which match a brand or string
  ☆17Updated 8 years ago
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 5 years ago
• brianwarehime / otx_transforms
  Transforms for the AlienVault OTX service
  ☆39Updated 8 years ago
• jheise / threatcmd
  Cli interface to threatcrowd.org
  ☆19Updated 7 years ago
• lruppert / bro-scripts
  Utilities and scripts for bro-ids
  ☆22Updated 11 years ago
• initconf / brocon-15
  brocon-15 scripts
  ☆13Updated 7 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆56Updated 9 years ago
• PidgeyL / MISP-Extractor
  Extract information from MISP via the API
  ☆15Updated 8 years ago
• hadojae / redonion
  **BETA** A simple buildscript for network security monitoring on RHEL/CentOS
  ☆31Updated 7 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 7 years ago
• crits / mcrits
  CRITs IOC Visualization in Maltego
  ☆28Updated 10 years ago
• EmergingThreats / cuckoo-1.1
  cuckoo-1.1 fork with suricata/moloch/clamav and other goodies
  ☆23Updated 10 years ago
• wolfpack1 / intel_collection_tools
  ☆22Updated 7 years ago
• hosom / bro-scripts
  Bro stuff.
  ☆12Updated 8 years ago
• lolnate / vt-hunter
  Automation for VirusTotal
  ☆31Updated 8 years ago
• defensivedepth / Sysmon_OSSEC
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Updated 9 years ago
• wolfpack1 / threatrecon
  API Tools
  ☆27Updated 8 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 7 years ago
• NetworkScout / ns
  Network Scout (NS) is an extension to Artillery. NS allows you to access log files from multiple clients.
  ☆21Updated 8 years ago
• jonschipp / mal-dnssearch
  Compare multiple log formats against malware reputation lists.
  ☆88Updated 7 years ago
• anthonykasza / beginner_brogramming
  scripts to help beginners program in Bro
  ☆20Updated 11 years ago
• ciscocsirt / netsarlacc
  ☆38Updated 6 years ago