Alternatives and similar repositories for zed-sample-data

Users that are interested in zed-sample-data are comparing it to the libraries listed below

• zeek / zeek-af_packet-plugin
  Plugin providing native AF_Packet support for Zeek.
  ☆33Updated last month
• endgameinc / eqllib
  ☆166Updated 4 years ago
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆88Updated 2 years ago
• zeek / zeek-agent
  This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2
  ☆123Updated 5 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆72Updated 5 years ago
• zeek / packages
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆143Updated this week
• MarkBaggett / domain_stats
  ☆222Updated 2 years ago
• mitre / cascade-server
  CASCADE Server
  ☆274Updated 2 years ago
• TheHive-Project / CortexDocs
  Documentation of Cortex
  ☆175Updated 2 years ago
• tenzir / threatbus
  🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
  ☆266Updated 2 years ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆115Updated last week
• zeek / zeek-training
  Zeek Training Materials/Products
  ☆40Updated 2 weeks ago
• tylabs / dovehawk
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Updated 4 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 4 years ago
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆250Updated 4 years ago
• MISP / misp-book
  User guide of MISP
  ☆281Updated 11 months ago
• SuperCowPowers / zat
  Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
  ☆450Updated last year
• fireeye / OpenIOC_1.1
  ☆135Updated 4 years ago
• oasis-open / cti-documentation
  OASIS TC Open Repository: GitHub Pages site for STIX and TAXII
  ☆104Updated last month
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆92Updated 6 years ago
• phantomcyber / phantom-apps
  Phantom Apps Repo
  ☆82Updated 4 years ago
• oasis-open / cti-taxii-server
  OASIS TC Open Repository: TAXII 2 Server Library Written in Python
  ☆136Updated last year
• mitre-attack / tram
  Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
  ☆353Updated 4 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 5 years ago
• eclecticiq / cabby
  TAXII client implementation from EclecticIQ
  ☆103Updated 4 years ago
• eclecticiq / OpenTAXII
  TAXII server implementation in Python from EclecticIQ
  ☆209Updated 2 weeks ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆351Updated 5 years ago
• socprime / SigmaUI
  SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)
  ☆189Updated 4 years ago
• corelight / community-id-spec
  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
  ☆189Updated last year
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated last year