BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.
☆19Apr 12, 2020Updated 6 years ago
Alternatives and similar repositories for graylog-zeek-content-pack
Users that are interested in graylog-zeek-content-pack are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- brocon-15 scripts☆13Apr 3, 2017Updated 9 years ago
- A program that uses xapian to index the flat file databases used by nfdump or flow-tools☆36Mar 26, 2018Updated 8 years ago
- ☆19Apr 13, 2022Updated 4 years ago
- ☆14Sep 15, 2017Updated 8 years ago
- A package manager for Zeek☆46Jul 29, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Dec 18, 2020Updated 5 years ago
- Connectors for the Zeek NetControl framework☆19Feb 4, 2025Updated last year
- Bro-IDS scripts☆50Sep 12, 2016Updated 9 years ago
- This is a simple PHP Rss Parser☆13Oct 14, 2015Updated 10 years ago
- ☆24Mar 29, 2020Updated 6 years ago
- CERT Australia Cyber Threat Intelligence (CTI) Toolkit☆15Nov 11, 2017Updated 8 years ago
- No elephant flows - flow shunting for Arista switches using EOS API☆27Apr 27, 2021Updated 5 years ago
- Scripts for Bro IDS and ELK Stack☆56Sep 2, 2015Updated 10 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Bro stuff.☆12May 24, 2016Updated 10 years ago
- Analysis scripts for the Bro Intrusion Detection System☆59Feb 26, 2014Updated 12 years ago
- Fork of http://godoc.org/code.google.com/p/gopacket☆14Jul 23, 2020Updated 6 years ago
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆143Updated this week
- Add iOS & Android device and push notification support in your Rails application.☆12Mar 6, 2017Updated 9 years ago
- Splunk app to support presentation at .conf2015 on free security tools and Splunk☆10Sep 24, 2015Updated 10 years ago
- Code that drives the public web-based tools for the Media Cloud Online News Archive and Directory.☆12Updated this week
- A collection of Python utilities for use in scripts related to working with "indicators of compromise" (IOCs).☆16Dec 19, 2018Updated 7 years ago
- API for the danish public libraries☆10Jun 23, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of Bro scripts I've written☆41Jun 5, 2015Updated 11 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- Detecting PowerShell Empire, Metasploit Meterpreter and Cobalt Strike agents by payload size sequence analysis and host correlation☆15Aug 17, 2018Updated 7 years ago
- TruthFinder finds true facts from a large amount of conflicting information☆18May 9, 2018Updated 8 years ago
- How to Zeek Sysmon Logs!☆102Feb 12, 2022Updated 4 years ago
- Allotment Routing Table☆15Nov 22, 2024Updated last year
- PHP wrapper functions for interfacing with the Nessus V6.x API☆15Feb 14, 2017Updated 9 years ago
- A Bro package to identify connections that are bursting (lots of data and transferring quickly).☆13Oct 15, 2020Updated 5 years ago
- A simple webshell in Go.☆14Aug 31, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Do RIPE Atlas traceroutes from networks with significant user populations in a country☆13Jun 20, 2018Updated 8 years ago
- Write documentation with your code, to keep them in sync, ideal for public API docs.☆18Feb 4, 2026Updated 6 months ago
- An npm package to defang and refang IoC☆13Jul 31, 2026Updated 2 weeks ago
- Enables Zeek to communicate with Tenzir☆11Jul 20, 2023Updated 3 years ago
- TLS Client Certificate Authentication and its Privacy Implications☆15Jul 25, 2017Updated 9 years ago
- the most basic DLL ever to pop a cmd.☆25Jul 11, 2020Updated 6 years ago
- IPFIXify reads ordinary text based log files, receives syslogs, parses Windows EventLogs, collects System Metrics, and more. Once collect…☆12Mar 6, 2018Updated 8 years ago