Security-Onion-Solutions / securityonion-bro-scripts
☆24Updated 4 years ago
Alternatives and similar repositories for securityonion-bro-scripts:
Users that are interested in securityonion-bro-scripts are comparing it to the libraries listed below
- Bro IDS + ELK Stack to detect and block data exfiltration☆47Updated 6 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆37Updated 3 months ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆33Updated last year
- Ansible playbook to install Malware Information Sharing Platform (MISP)☆17Updated 9 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 8 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- A package manager for Zeek☆44Updated last month
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 10 years ago
- ☆72Updated 3 years ago
- ☆36Updated 4 years ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 8 months ago
- Threat Intelligence distribution☆30Updated 9 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- ☆23Updated 4 years ago
- The Bro/Zeek language cheat sheet☆51Updated 11 years ago
- Scripts for Bro IDS and ELK Stack☆56Updated 9 years ago
- Metadata Inspection Database Alerting System☆42Updated 11 years ago
- Debian and Red Hat packaging for SIE DNS sensor☆15Updated last year
- ☆38Updated 6 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆35Updated last year
- Bro scripts to be shared with the community☆109Updated 11 years ago
- scan-detection policies for bro☆15Updated this week
- ☆12Updated 5 years ago
- API to access the Redis database of a BGP Ranking instance.☆17Updated 7 years ago
- Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!☆18Updated 11 years ago
- ☆85Updated 11 years ago