berthayes / cp-zeek
Analyze Zeek IDS data with ksqlDB running on Confluent Platform via Docker on your laptop. Or spin up an arbitrary number of AWS hosts, each running Confluent Platform and ksqlDB for use in an instructor-led workshop.
☆11Updated 3 years ago
Alternatives and similar repositories for cp-zeek:
Users that are interested in cp-zeek are comparing it to the libraries listed below
- ☆19Updated 2 years ago
- Geospatial UDFs for KSQL☆22Updated 3 years ago
- Kafka connector for Splunk☆93Updated 6 months ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated 2 weeks ago
- ☆15Updated 7 years ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆33Updated last year
- Zeek support for Community ID flow hashing.☆35Updated last year
- A Kafka Serde that reads and writes records from and to Blob storage (S3, Azure, Google) transparently.☆57Updated last week
- Java Application to automate adding Kafka ACLs & Kafka Topics (works with Confluent Platform & Confluent Cloud)☆35Updated 3 years ago
- RELK -- The Research Elastic Stack (Kafka, Beats, Zookeeper, Logstash, ElasticSearch, Kibana, Spark, & Jupyter -- All in Docker)☆26Updated 5 years ago
- Kafka Streams demo project containing Derivative Events, the Processor Api and Wall-clock examples☆26Updated 4 years ago
- A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI☆67Updated 7 years ago
- The Elastic Security Research team produces public-facing content, in the way of summary blogs, detailed releases, and artifacts; articul…☆9Updated 2 years ago
- Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash☆54Updated 2 years ago
- A pivot table plugin for Kibana 5☆24Updated 6 years ago
- Data Governance app for Splunk☆12Updated last year
- ☆37Updated 5 years ago
- A Workflow for Data Scientists to bring Jupyter Notebook Visualizations to Kibana Dashboards☆45Updated 2 years ago
- Example of different security configurations for Apache Kafka and the Confluent Platform☆180Updated last year
- MonitoFi: Health & Performance Monitor for your Apache NiFi☆62Updated last year
- Data pipeline automation tool☆26Updated last year
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Rapid cybersecurity toolkit based on Elastic in Docker. Designed to quickly build elastic-based environments to analyze and execute threa…☆18Updated 4 years ago
- ☆23Updated 4 years ago
- ☆53Updated last week
- A solution to help you build automation and gitops in your Apache Kafka deployments. The Kafka gitops!☆423Updated 8 months ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆27Updated 3 years ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Updated 5 years ago
- Open-source framework to detect outliers in Elasticsearch events☆208Updated last year