Alternatives and similar repositories for bro-scripts

Users that are interested in bro-scripts are comparing it to the libraries listed below

• sooshie / bro-scripts
  Various Bro scripts
  ☆96Updated 9 years ago
• LiamRandall / bro-scripts
  Bro scripts to be shared with the community
  ☆111Updated 12 years ago
• criticalstack / bro-scripts
  ☆72Updated 4 years ago
• hosom / file-extraction
  Extract files from network traffic with Zeek.
  ☆102Updated 5 years ago
• JustinAzoff / bro_scripts
  Analysis scripts for the Bro Intrusion Detection System
  ☆59Updated 11 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated 2 years ago
• TravisFSmith / MyBroElk
  Scripts for Bro IDS and ELK Stack
  ☆57Updated 10 years ago
• zeek / zeek-osquery
  Bro/Zeek integration with osquery
  ☆94Updated 5 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆148Updated 4 years ago
• jonschipp / bro-scripts
  A collection of Bro scripts I've written
  ☆41Updated 10 years ago
• aboutsecurity / Bro-samples
  Network Forensics Bro scripts & pcap samples
  ☆63Updated 11 years ago
• 401trg / detections
  This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant ya…
  ☆122Updated 4 years ago
• LiamRandall / BroMalware-Exercise
  ☆85Updated 12 years ago
• EmergingThreats / et-luajit-scripts
  ☆75Updated 3 years ago
• slacker007 / Bro-NetworkSecurityMonitoring
  collection of bro and bash scripts that when run from the same directory on Linux distro with bro installed, will pull information such a…
  ☆12Updated 9 years ago
• corelight / http-stalling-detector
  Detect HTTP stalling attacks like slowloris with Bro
  ☆19Updated 7 years ago
• stephenbrannon / IOCextractor
  IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
  ☆134Updated 10 years ago
• tylabs / dovehawk
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Updated 4 years ago
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 6 years ago
• jsiwek / zeek-cryptomining
  Detect cryptocurrency mining traffic with Zeek.
  ☆46Updated 4 years ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆157Updated 7 months ago
• stratosphereips / Manati
  A web-based tool to assist the work of the intuitive threat analysts.
  ☆114Updated 6 years ago
• spitfire55 / MegaDev
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Updated 7 years ago
• xme / cuckoomx
  CuckooMX is a project to automate analysis of files transmitted over SMTP (using the Cuckoo sandbox)
  ☆41Updated 13 years ago
• beave / sagan-rules
  Rule sets for Sagan
  ☆106Updated 5 years ago
• mixmodeai / bro_intel_linter
  Bro Intel Feed Linter
  ☆26Updated 6 years ago
• sethhall / bro-apt1
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆51Updated 11 years ago
• initconf / scan-NG
  scan-detection policies for bro
  ☆16Updated last year
• gcrahay / otx_misp
  Imports Alienvault OTX pulses to a MISP instance
  ☆53Updated 4 years ago
• QTek / QRadio
  QRadio ~ Best Threat Intelligence Radio ~ Tune In!
  ☆98Updated 9 years ago