Extracts fields from zeek logs, compatible with zeek-cut
☆28Jul 10, 2024Updated 2 years ago
Alternatives and similar repositories for zcutter
Users that are interested in zcutter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆81Jun 25, 2026Updated 2 months ago
- Tools for simulating threats☆205Oct 27, 2023Updated 2 years ago
- ☆17Mar 24, 2026Updated 5 months ago
- Learn about a network from a pcap file or reading from an interface☆30Apr 6, 2024Updated 2 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆641Jun 17, 2026Updated 3 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆13Nov 24, 2019Updated 6 years ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆265Feb 9, 2026Updated 7 months ago
- The CAPTCHA-resilient contact scraper.☆63Nov 18, 2025Updated 10 months ago
- Parses for Google Analytic values in raw files like RAM, DD images etc.☆20Apr 17, 2016Updated 10 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 3 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- ☆24Mar 20, 2023Updated 3 years ago
- Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science☆155Sep 1, 2026Updated 3 weeks ago
- An ARP based Operating System version scanner☆15Jan 21, 2013Updated 13 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Aralez is a triage tool for Windows, Linux and MacOS that automates the collection of system information, network/process data, and files…☆25Aug 14, 2026Updated last month
- A simple Python script to do quick, targeted recon of a given domain.☆87Apr 17, 2025Updated last year
- Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana☆303Mar 19, 2026Updated 6 months ago
- Stealth is a File Integrity scanner performing its work in a stealthy way.☆12Jun 25, 2018Updated 8 years ago
- Generate Software Bill of Materials (SBOM) from virtual machine disk images, without booting the VM.☆20Aug 6, 2026Updated last month
- line based tcp load balancing proxy.☆14Jun 18, 2024Updated 2 years ago
- Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy c…☆132Oct 24, 2022Updated 3 years ago
- Content for the CERT Guide to Coordinated Vulnerability Disclosure☆17Sep 3, 2026Updated 2 weeks ago
- The missing API for the CISA Known Exploited Vulnerabilities Catalog. This repository contains the source running at kevin.gtfkd.com☆26Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- -OFFICIAL REPO - DISA STIG Compliance Automation leveraging Puppet, Ansible, and Bash☆12Nov 18, 2014Updated 11 years ago
- Zeek package for tracking long connections to report them before they have completed.☆31Nov 25, 2025Updated 9 months ago
- A Bro package to identify connections that are bursting (lots of data and transferring quickly).☆13Oct 15, 2020Updated 5 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,510Jan 12, 2026Updated 8 months ago
- Enables Zeek to communicate with Tenzir☆11Jul 20, 2023Updated 3 years ago
- IPFIXify reads ordinary text based log files, receives syslogs, parses Windows EventLogs, collects System Metrics, and more. Once collect…☆12Mar 6, 2018Updated 8 years ago
- OXA - Open XDR architecture☆15Apr 1, 2025Updated last year
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Dec 18, 2020Updated 5 years ago
- TWRP device tree for ZTE Axon 7 (ailsa_ii)☆12Mar 7, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Bro Detection Scripts☆10Mar 9, 2021Updated 5 years ago
- Golang script to bypass the client-side health checks when logging into DUO protected accounts☆11Aug 26, 2023Updated 3 years ago
- A simple example on how to initiate a direct syscall on WoW64☆11Feb 2, 2018Updated 8 years ago
- Bluetooth Find provides a mechanism with which you can locate and track discoverable Bluetooth devices☆34Dec 17, 2018Updated 7 years ago
- Device profile: Define acceptable amounts of traffic for your devices and see a report of outliers.☆16Jan 28, 2020Updated 6 years ago
- Brute force password selection for EAP-MD5 authentication exchanges☆29Aug 4, 2017Updated 9 years ago
- Tool to log conntrack flows and associated process/service info☆16Jul 13, 2017Updated 9 years ago