brimdata / zed-sample-data

Related projects ⓘ

Alternatives and complementary repositories for zed-sample-data

• corelight / ecs-mapping
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Updated last week
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated this week
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆31Updated last month
• zeek / zeekctl
  Tool for managing Zeek deployments.
  ☆53Updated 3 months ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆34Updated last year
• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆33Updated 7 months ago
• zeek / zeek-agent-v2
  Open source endpoint agent providing host information to Zeek. [v2]
  ☆65Updated 3 weeks ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆102Updated this week
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆86Updated last year
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆68Updated 4 years ago
• zeek / zeek-training
  Zeek Training Materials/Products
  ☆35Updated last month
• zeek / packages
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆130Updated this week
• zeek / zeek-agent
  This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2
  ☆124Updated 3 years ago
• stratosphereips / zeek_anomaly_detector
  A completely automated anomaly detector Zeek network flows files (conn.log).
  ☆74Updated 3 months ago
• StamusNetworks / suricata-analytics
  ☆25Updated 3 weeks ago
• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆28Updated 4 years ago
• corelight / zeek-long-connections
  Zeek package for tracking long connections to report them before they have completed.
  ☆29Updated 2 years ago
• fireeye / OpenIOC_1.1
  ☆127Updated 3 years ago
• MITRECND / bro-http2
  Plugin for Zeek/Bro which provides http2 decoder/analyzer
  ☆30Updated 5 months ago
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆122Updated 2 months ago
• apache / metron-bro-plugin-kafka
  Apache Metron
  ☆59Updated 4 years ago
• brimdata / brimcap
  Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
  ☆76Updated 3 weeks ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆95Updated 4 years ago
• oasis-open / cti-taxii-server
  OASIS TC Open Repository: TAXII 2 Server Library Written in Python
  ☆122Updated 6 months ago
• oasis-open / cti-stix-elevator
  OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON
  ☆49Updated 6 months ago
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆171Updated last month
• corelight / pycommunityid
  A Python implementation of the Community ID flow hashing standard
  ☆23Updated 11 months ago
• michalpurzynski / zeek-scripts
  zeek-scripts
  ☆41Updated 5 years ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆29Updated 3 weeks ago