JustinAzoff / zeek-clickhouse

Related projects: ⓘ

• brimdata / zync
  Kafka connector to sync Zed lakes to and from Kafka topics
  ☆18Updated 3 months ago
• danthegoodman1 / IceDBS3Proxy
  IceDB S3 Proxy to trick S3 clients into only seeing alive files
  ☆12Updated 8 months ago
• gowebpki / jcs
  A golang JSON canonicalization scheme library based on RFC 8785
  ☆19Updated 11 months ago
• tenzir / dockerized-zeek
  Dockerized Zeek
  ☆10Updated 6 months ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆32Updated last year
• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆27Updated 4 years ago
• ClickHouse / web-tables-demo
  ☆15Updated last year
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆85Updated 4 months ago
• TcM1911 / stix2
  A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data
  ☆22Updated 5 months ago
• hashlookup / poppy
  Rust implementation of the DCSO Bloom filter
  ☆26Updated last month
• trisulnsm / bitmaul
  A Lua helper library for creating network protocol dissectors
  ☆13Updated 3 years ago
• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆33Updated 3 weeks ago
• danthegoodman1 / BigHouse
  Running ClickHouse like it's BigQuery
  ☆37Updated last year
• corelight / json-streaming-logs
  Bro script package to create JSON formatted logs to stream into data analysis systems.
  ☆27Updated 9 months ago
• aaw / regrams
  Convert regular expressions to trigram queries in the spirit of Google's codesearch.
  ☆22Updated last year
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆32Updated this week
• counterflow-ai-archive / dragonfly-mle
  ☆52Updated this week
• dnstap / dnstap.pb
  flexible, structured event replication format for DNS servers (Protocol Buffers schema)
  ☆24Updated 6 months ago
• Velocidex / vfilter
  A library implementing a generic SQL like query language.
  ☆19Updated last month
• samuelesabella / ebpflow
  This repo aims to offer a packet flow tracer based on bpf
  ☆13Updated 4 years ago
• JustinAzoff / flow-indexer
  Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files
  ☆44Updated 4 months ago
• sealingtech / EDCOP-SURICATA
  ☆9Updated 4 years ago
• NSkelsey / aaalm
  Generate network maps from packet captures
  ☆30Updated 5 years ago
• zeek / time-machine
  Time-Machine Dynamic Bulk Packet Recorder
  ☆35Updated 8 months ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆61Updated this week
• frikky / hive4go
  A Golang API for TheHive
  ☆13Updated 4 years ago
• eait-itig / flow-collector
  aggregate IP flow data for storage in a ClickHouse database
  ☆20Updated 5 months ago
• D4-project / architecture
  Architecture - design and implementation of the D4 project architecture
  ☆16Updated 3 years ago
• recoilme / proxyhouse
  Collects many small insterts to ClickHouse and send in big inserts
  ☆11Updated 2 years ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆50Updated 2 months ago