BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.
☆19Apr 12, 2020Updated 6 years ago
Alternatives and similar repositories for graylog-zeek-content-pack
Users that are interested in graylog-zeek-content-pack are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- scan-detection policies for bro☆16Jan 16, 2025Updated last year
- JoeSandbox-Bro is a simple bro script which extracts files from your internet connection and analyzes them automatically on Joe Sandbox☆45Jun 6, 2019Updated 7 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Mar 26, 2018Updated 8 years ago
- brocon-15 scripts☆13Apr 3, 2017Updated 9 years ago
- ☆15Jan 14, 2026Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆14Sep 15, 2017Updated 9 years ago
- A package manager for Zeek☆47Oct 27, 2026Updated last week
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago
- A collection of Bro scripts I've written☆41Jun 5, 2015Updated 11 years ago
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Dec 18, 2020Updated 5 years ago
- Connectors for the Zeek NetControl framework☆19Feb 4, 2025Updated last year
- Various Bro scripts☆97Jul 8, 2016Updated 10 years ago
- ☆16Feb 13, 2020Updated 6 years ago
- Various Bro scripts☆37May 20, 2014Updated 12 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch☆61Feb 20, 2017Updated 9 years ago
- Bro stuff.☆12May 24, 2016Updated 10 years ago
- ☆24Mar 29, 2020Updated 6 years ago
- Scripts for Bro IDS and ELK Stack☆57Sep 2, 2015Updated 11 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- This is a simple PHP Rss Parser☆13Oct 14, 2015Updated 11 years ago
- Detect Phishing with Bro IDS☆18Feb 1, 2017Updated 9 years ago
- Analysis scripts for the Bro Intrusion Detection System☆59Feb 26, 2014Updated 12 years ago
- Fork of http://godoc.org/code.google.com/p/gopacket☆14Jul 23, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆21Oct 16, 2021Updated 5 years ago
- Splunk app to support presentation at .conf2015 on free security tools and Splunk☆10Sep 24, 2015Updated 11 years ago
- CERT Australia Cyber Threat Intelligence (CTI) Toolkit☆15Nov 11, 2017Updated 8 years ago
- Advertizes BGP routes when given system check says it's alive.☆13Sep 20, 2013Updated 13 years ago
- SPL to lucene translator☆15Jan 24, 2015Updated 11 years ago
- A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).☆16Dec 19, 2018Updated 7 years ago
- Detecting PowerShell Empire, Metasploit Meterpreter and Cobalt Strike agents by payload size sequence analysis and host correlation☆15Aug 17, 2018Updated 8 years ago
- Combining OSINT sources in Elastic Stack☆78Oct 10, 2020Updated 6 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- Python code to create a graph of the internet (AS nodes, BGP routes, Prefixes ...) with SemanticNet.☆15Aug 24, 2019Updated 7 years ago
- How to Zeek Sysmon Logs!☆102Feb 12, 2022Updated 4 years ago
- Swift‑CHD is a lightweight macOS GUI front end for `chdman`, making CD image to CHD conversions fast and simple. Requires `chdman` instal…☆12Sep 25, 2026Updated last month
- Windows login backdoor diagnostic tool☆11Apr 2, 2017Updated 9 years ago
- Stealth is a File Integrity scanner performing its work in a stealthy way.☆12Jun 25, 2018Updated 8 years ago
- Penn SafeDNS☆14Oct 8, 2013Updated 13 years ago