grutz / bro
Bro is a powerful network analysis framework that is much different from the typical IDS you may know. Official mirror of git.bro.org/bro.git .
☆10Updated 10 years ago
Alternatives and similar repositories for bro:
Users that are interested in bro are comparing it to the libraries listed below
- Hakabana monitoring tool using Haka, ElastcSearch and Kibana☆20Updated 10 years ago
- Extensible set of Storm topologies and topology attributes for streaming, enriching, indexing, and storing telemetry in Hadoop.☆132Updated last year
- ☆25Updated 8 years ago
- An API for consuming all the memory of Java apps using deserialization☆28Updated 9 years ago
- Vagrantfile and scripts for building a disposable OpenSOC Cluster☆29Updated 8 years ago
- vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana☆41Updated 10 years ago
- Bro-IDS scripts☆50Updated 8 years ago
- OpenVAS connector for versions 6, 7, 8 and 9☆80Updated 2 years ago
- Packetpig - Open Source Big Data Security Analytics☆299Updated 6 years ago
- User interface for OpenSOC☆100Updated 9 years ago
- An environment for comprehensive, automated analysis of web-based exploits, based on Cuckoo sandbox.☆125Updated 9 years ago
- (OBSOLETE) Plugins for Bro☆53Updated 7 years ago
- Templates for Kibana/Logstash to use with Suricata IDPS☆80Updated 9 years ago
- Meeting notes☆15Updated 8 years ago
- Misc. Bro scripts☆63Updated 7 years ago
- Bro scripts to be shared with the community☆109Updated 12 years ago
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 11 years ago
- A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools☆42Updated 8 years ago
- A Framework for managing Cyber Threat Intelligence.☆5Updated 6 years ago
- Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers☆72Updated 7 years ago
- Scripts for Bro IDS and ELK Stack☆56Updated 9 years ago
- Faraday Continuous Scanning☆33Updated 8 years ago
- ☆75Updated 3 years ago
- A malware/botnet analysis framework written in Ruby.☆197Updated last year
- Rule sets for Sagan☆102Updated 4 years ago
- sniff/log database traffic or actively execute arbitrary queries via TCP injection☆43Updated 8 years ago
- IRMA ansible☆24Updated 8 years ago
- Python bindings to libhtp☆30Updated 4 years ago
- Signature-free approach library to detect injection and commanding attacks☆87Updated 3 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 9 years ago