module for osquery to load Bro logs into tables
☆28Apr 28, 2015Updated 11 years ago
Alternatives and similar repositories for brosquery
Users that are interested in brosquery are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Extensions for Zeek's Intelligence Framework.☆11Mar 1, 2022Updated 4 years ago
- Logging plugin to bro to send logs to a Kafka broker☆20Nov 29, 2017Updated 8 years ago
- (OBSOLETE) Plugins for Bro☆53Sep 13, 2017Updated 9 years ago
- Bro/Zeek integration with osquery☆94Nov 2, 2020Updated 5 years ago
- Bro Intel Feed Linter☆26Aug 30, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Dockerfiles for NSM tools☆84Apr 14, 2017Updated 9 years ago
- Python script that gets IOC from MISP and converts it into BRO intel files.☆13Apr 17, 2016Updated 10 years ago
- Zeek package to generate a SMB client fingerprint☆27May 5, 2020Updated 6 years ago
- The Auditd Framework logs and applies security policy to linux auditd data☆16Jan 26, 2018Updated 8 years ago
- Full packet capture with flow cutoff, rotation, and compression☆15Sep 18, 2018Updated 8 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆122Nov 19, 2020Updated 5 years ago
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44May 9, 2024Updated 2 years ago
- Bro scripts written by CrowdStrike Services☆151May 3, 2021Updated 5 years ago
- Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark☆456Jun 1, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Dec 18, 2020Updated 5 years ago
- Site for IWS book content☆17Oct 28, 2018Updated 7 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- Script for generating Bro intel files from pdf or html reports☆76Dec 7, 2015Updated 10 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Jul 23, 2015Updated 11 years ago
- A package manager for Zeek☆47Updated this week
- A LLVM-based toolchain for Linux designed to build a portable osquery☆43Apr 8, 2026Updated 6 months ago
- Bro Snippets☆21Nov 7, 2014Updated 11 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Bro scripts to be shared with the community☆110Mar 6, 2013Updated 13 years ago
- Awesome Data Sanitization☆12Jun 6, 2021Updated 5 years ago
- Cross Namespace Nginx Ingress Controller setup and a working demo☆16Jun 21, 2018Updated 8 years ago
- No elephant flows - flow shunting for Arista switches using EOS API☆27Apr 27, 2021Updated 5 years ago
- Bro Live! A Bro training/learning environment.☆14Jul 21, 2015Updated 11 years ago
- Analysis related to article on FOIA Online Database.☆11Feb 2, 2017Updated 9 years ago
- ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems☆16Jan 9, 2018Updated 8 years ago
- This python scripts can calculate the WHOIS Similarity Distance between two given domains.☆29Dec 8, 2022Updated 3 years ago
- integrating bro into yara☆33Dec 9, 2014Updated 11 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Flow-based SSH intrusion detection system (NfSen plugin)☆41Dec 10, 2015Updated 10 years ago
- Haskell parser for the REIL intermediate language (currently a work-in-progress)☆11Jan 12, 2018Updated 8 years ago
- Logstash configuration files for analyzing various types of logs☆24Dec 9, 2016Updated 9 years ago
- Use AMQP broker to send or receive messages via FluentD☆15Jul 12, 2020Updated 6 years ago
- Automating simple report creating of threat intelligence using ChatGPT and Greynoise API.☆10Oct 3, 2023Updated 3 years ago
- Summit Route End Point Protection - Client code☆16Apr 10, 2016Updated 10 years ago
- A tool to download malwares☆16May 22, 2023Updated 3 years ago