This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a match it sends email alerts to the email address specified in the mailTo parameter on yaraAlert.conf file. The alert includes network context of the file transfer and attaches the suspicious file if it is less tha…
☆62Dec 16, 2023Updated 2 years ago
Alternatives and similar repositories for yaraZeekAlert
Users that are interested in yaraZeekAlert are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆24Dec 15, 2022Updated 3 years ago
- Python code for mass scanning IP ranges for certificates☆13Oct 30, 2020Updated 6 years ago
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- ☆100Oct 7, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Extract files from network traffic with Zeek.☆103Mar 17, 2020Updated 6 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆41Aug 18, 2022Updated 4 years ago
- Yet another rule generator for Yara☆29Jun 6, 2025Updated last year
- JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox☆45Jun 6, 2019Updated 7 years ago
- Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark☆457Jun 1, 2026Updated 5 months ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- ☆13Feb 5, 2025Updated last year
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Oct 31, 2018Updated 8 years ago
- Tornado Demo Vulnerable Application to test SQL injection vulnerability and patch it using RASP (Runtime Application Self-Protection)☆10Nov 15, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Various Yara signatures (possibly to be included in a release later).☆89May 23, 2019Updated 7 years ago
- Automatic Yara Rule Generation☆332Feb 2, 2016Updated 10 years ago
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆30Jun 11, 2024Updated 2 years ago
- Simple PowerShell script to enable process scanning with Yara.☆101Oct 4, 2022Updated 4 years ago
- Misc malware stuff☆11Sep 30, 2020Updated 6 years ago
- Ripple20 Critical Vulnerabilities - Detection Logic and Signatures☆13May 28, 2021Updated 5 years ago
- ☆131Feb 2, 2025Updated last year
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A simple way of detecting multithreaded exfiltration in Zeek.☆15May 1, 2025Updated last year
- Little utility scripts for the Zeek Network Security Monitor☆14Apr 28, 2021Updated 5 years ago
- Tool for navigating Python call graphs. Old project page: https://github.com/nccgroup/call_map☆18Apr 10, 2023Updated 3 years ago
- ☆19Sep 21, 2020Updated 6 years ago
- Sentinel Guard - Use to build up Honeypot and Honeynet with ZERO cost easily and simply.☆18Jul 25, 2021Updated 5 years ago
- Toolset for research malware and Cobalt Strike beacons☆209Mar 11, 2025Updated last year
- IDA python plugin to scan binary with Yara rules☆184Jan 30, 2024Updated 2 years ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 11 months ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆111Mar 13, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Active C2 IoCs☆100Nov 28, 2022Updated 3 years ago
- ☆12Jun 29, 2021Updated 5 years ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆215Jul 21, 2022Updated 4 years ago
- A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.☆18Sep 10, 2023Updated 3 years ago
- Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260☆19Nov 28, 2019Updated 6 years ago
- Zeek package for tracking long connections to report them before they have completed.☆31Nov 25, 2025Updated 11 months ago
- zeek-scripts☆44Dec 27, 2018Updated 7 years ago