brimdata / zed-sample-dataLinks
sample input data for zq
☆15Updated 2 months ago
Alternatives and similar repositories for zed-sample-data
Users that are interested in zed-sample-data are comparing it to the libraries listed below
Sorting:
- Plugin providing native AF_Packet support for Zeek.☆33Updated 3 months ago
- Docker files for building Zeek.☆88Updated 2 years ago
- ☆168Updated 5 years ago
- OASIS TC Open Repository: TAXII 2 Server Library Written in Python☆137Updated last year
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆37Updated last year
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆124Updated 5 years ago
- Mapping NSM rules to MITRE ATT&CK☆73Updated 5 years ago
- OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships☆161Updated 2 weeks ago
- Zeek IDS Dockerfile☆101Updated 3 years ago
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆144Updated last week
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆189Updated 4 years ago
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆122Updated 4 years ago
- MISP Docker (XME edition)☆282Updated 2 years ago
- Documentation of Cortex☆174Updated 2 years ago
- Graphics, icons, and diagrams to support STIX 2☆47Updated 4 years ago
- Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.☆356Updated 4 years ago
- TAXII server implementation in Python from EclecticIQ☆210Updated last month
- CASCADE Server☆274Updated 3 years ago
- TAXII client implementation from EclecticIQ☆104Updated 4 years ago
- Bro/Zeek integration with osquery☆94Updated 5 years ago
- OASIS TC Open Repository: GitHub Pages site for STIX and TAXII☆105Updated 2 weeks ago
- Python API Client for TheHive☆234Updated 2 months ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆269Updated 2 years ago
- File Scanning Framework☆295Updated 4 years ago
- User guide of MISP☆282Updated last year
- ☆134Updated 4 years ago
- A utility repo to assist with converting between MISP and STIX formats☆69Updated 5 years ago
- Django web interface for managing Yara rules☆197Updated 7 years ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆31Updated last year
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆252Updated 4 years ago