Alternatives and similar repositories for cifsdk-v2

Users that are interested in cifsdk-v2 are comparing it to the libraries listed below

• corelight / conn-burst

  View on GitHub
  A Bro package to identify connections that are bursting (lots of data and transferring quickly).
  ☆13Oct 15, 2020Updated 5 years ago
• csirtgadgets / massive-octo-spice

  View on GitHub
  DEPRECATED - USE v3 (bearded-avenger)
  ☆229Jan 16, 2018Updated 8 years ago
• irtimmer / bro-xdp_packet-plugin

  View on GitHub
  Plugin providing AF_XDP support for Bro.
  ☆14May 10, 2021Updated 4 years ago
• ncsa / bro-doctor

  View on GitHub
  ☆24Mar 29, 2020Updated 5 years ago
• sheharbano / Correlation-Framework

  View on GitHub
  A framework that correlates Bro events
  ☆18Oct 25, 2013Updated 12 years ago
• anthonykasza / scratch_pad

  View on GitHub
  Bro Snippets
  ☆21Nov 7, 2014Updated 11 years ago
• paulpc / nyx

  View on GitHub
  Threat Intelligence distribution
  ☆31Dec 30, 2015Updated 10 years ago
• csirtgadgets / cif-v1

  View on GitHub
  DEPRECATED USE v3!
  ☆59Sep 8, 2015Updated 10 years ago
• corelight / log-add-http-post-bodies

  View on GitHub
  Add POST body excerpt to Bro's HTTP log
  ☆14Dec 10, 2025Updated 2 months ago
• initconf / brocon-15

  View on GitHub
  brocon-15 scripts
  ☆13Apr 3, 2017Updated 8 years ago
• CERT-Polska / hsn2-bundle

  View on GitHub
  ☆29May 4, 2016Updated 9 years ago
• anthonykasza / beginner_brogramming

  View on GitHub
  scripts to help beginners program in Bro
  ☆21Aug 10, 2013Updated 12 years ago
• s0m30ne / JuniperBackdoor

  View on GitHub
  Juniper backdoor
  ☆14Dec 24, 2015Updated 10 years ago
• csirtgadgets / bearded-avenger

  View on GitHub
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Apr 20, 2023Updated 2 years ago
• botherder / vxcage

  View on GitHub
  REST API based malware repository (abandoned)
  ☆107Apr 4, 2015Updated 10 years ago
• hosom / bro-phishing

  View on GitHub
  Detect Phishing with Bro IDS
  ☆18Feb 1, 2017Updated 9 years ago
• ukncsc / stix-cvebuilder

  View on GitHub
  CVE Builder script that generates STIX formatted Exploit Target objects
  ☆18Oct 18, 2016Updated 9 years ago
• jeffbryner / pyioc

  View on GitHub
  Python tools for IOC (Indicator of Compromise) handling
  ☆96Nov 25, 2021Updated 4 years ago
• g-clef / KafkaLogger

  View on GitHub
  Logging plugin to bro to send logs to a Kafka broker
  ☆20Nov 29, 2017Updated 8 years ago
• stratosphereips / StratosphereTestingFramework

  View on GitHub
  The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere …
  ☆50Mar 12, 2018Updated 7 years ago
• google / catnip

  View on GitHub
  Catnip Sandbox
  ☆26Jan 10, 2018Updated 8 years ago
• mozilla / zept

  View on GitHub
  INACTIVE - http://mzl.la/ghe-archive - Zeek Extreme Performance Tuning
  ☆26Oct 10, 2019Updated 6 years ago
• blackbagtech / sleuthkit-APFS

  View on GitHub
  A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.
  ☆26Oct 27, 2019Updated 6 years ago
• JustinAzoff / can-i-use-afpacket-fanout

  View on GitHub
  Validate if afpacket PACKET_FANOUT_HASH is working properly
  ☆25May 19, 2022Updated 3 years ago
• corelight / zeek-long-connections

  View on GitHub
  Zeek package for tracking long connections to report them before they have completed.
  ☆31Nov 25, 2025Updated 2 months ago
• zeek / bro-plugins

  View on GitHub
  (OBSOLETE) Plugins for Bro
  ☆53Sep 13, 2017Updated 8 years ago
• zeek / bro-scripts

  View on GitHub
  Misc. Bro scripts
  ☆64Jun 21, 2017Updated 8 years ago
• hanzhang0116 / BotDigger

  View on GitHub
  Detecting DGA bots in a single network using DNS traffic
  ☆26Feb 7, 2018Updated 8 years ago
• corelight / json-streaming-logs

  View on GitHub
  Bro script package to create JSON formatted logs to stream into data analysis systems.
  ☆30Dec 3, 2025Updated 2 months ago
• passivetotal / HT_infra

  View on GitHub
  VPS infrastructure found in HT dumps
  ☆26Jul 10, 2015Updated 10 years ago
• pevma / Suricata-Logstash-Templates

  View on GitHub
  Templates for Kibana/Logstash to use with Suricata IDPS
  ☆81Mar 12, 2016Updated 9 years ago
• andrewmichaelsmith / manuka

  View on GitHub
  Docker based honeypot (Dionaea & Kippo)
  ☆26Mar 21, 2015Updated 10 years ago
• kost / docker-moloch

  View on GitHub
  A Docker container for Moloch based on minimal Debian
  ☆26Jan 25, 2016Updated 10 years ago
• gnarlyhaze / Kali-Update-Script

  View on GitHub
  ☆10Aug 4, 2020Updated 5 years ago
• StamusNetworks / Amsterdam

  View on GitHub
  Docker based Suricata, Elasticsearch, Logstash, Kibana, Scirius aka SELKS
  ☆184Sep 13, 2022Updated 3 years ago
• blacktop / docker-bro

  View on GitHub
  Bro IDS Dockerfile
  ☆129Sep 14, 2019Updated 6 years ago
• perdisci / amico

  View on GitHub
  AMICO - Accurate Behavior-Based Detection of Malware Downloads
  ☆31Nov 13, 2017Updated 8 years ago
• pcbje / pyad1

  View on GitHub
  Python library for parsing AccessData AD1 images
  ☆33Jun 1, 2023Updated 2 years ago
• corelight / ecs-mapping

  View on GitHub
  Mapping Corelight or Zeek data to Elastic Common Schema fields
  ☆34Nov 3, 2025Updated 3 months ago