zeek-scripts
☆44Dec 27, 2018Updated 7 years ago
Alternatives and similar repositories for zeek-scripts
Users that are interested in zeek-scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆35Jan 4, 2025Updated last year
- Extract files from network traffic with Zeek.☆102Mar 17, 2020Updated 6 years ago
- A Zeek log writer plugin that publishes to Kafka.☆55Jun 3, 2026Updated 4 months ago
- A completely automated anomaly detector Zeek network flows files (conn.log).☆86Aug 3, 2026Updated 2 months ago
- Top DNS Measurement for Bro☆10Aug 22, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 威胁检测规则集☆15Jul 5, 2019Updated 7 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- A Zeek package that detects Zoom logins and meeting joins☆12Apr 15, 2020Updated 6 years ago
- Extracting and analyzing URLs from Emails for phishing events☆22Mar 28, 2026Updated 6 months ago
- A set of Zeek scripts to detect ATT&CK techniques.☆623Jun 26, 2024Updated 2 years ago
- ☆22Dec 20, 2024Updated last year
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆17Jun 15, 2021Updated 5 years ago
- Bro IDS programs collection.☆146Oct 16, 2019Updated 6 years ago
- ☆79Apr 3, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Configurations to implement Wazuh☆13Nov 28, 2022Updated 3 years ago
- Suricata rules for the new critical vulnerabilities☆85Jan 26, 2021Updated 5 years ago
- ☆39Sep 22, 2026Updated 3 weeks ago
- Zeek package to create JSON formatted logs to stream into data analysis systems.☆31Dec 3, 2025Updated 10 months ago
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆123Jul 12, 2021Updated 5 years ago
- Windows log and threat hunting with powershell☆16Dec 11, 2020Updated 5 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Apr 22, 2020Updated 6 years ago
- ☆12Aug 13, 2018Updated 8 years ago
- Zeek Training Materials/Products☆47Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- setup zeek, previously Bro IDS☆17Updated this week
- A Python implementation of the Community ID flow hashing standard☆24Nov 29, 2023Updated 2 years ago
- Read Zeek (Bro) logs into typed Python records; convert to JSON or CSV, map to Elastic Common Schema, load into Elasticsearch.☆42Oct 7, 2026Updated last week
- Zeek-Formatted Threat Intelligence Feeds☆405Updated this week
- This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…☆62Dec 16, 2023Updated 2 years ago
- Emulator, debugger and compiler for the NDH architecture - Emulator for CTF NDH 2k12☆39Apr 25, 2013Updated 13 years ago
- incident response scripts☆18Mar 4, 2019Updated 7 years ago
- Bro integration with osquery☆15Mar 24, 2023Updated 3 years ago
- To determine piano chords based on given scale☆11Aug 13, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆52Aug 22, 2021Updated 5 years ago
- Use current thread token to execute command☆15Jan 27, 2021Updated 5 years ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆35Oct 1, 2026Updated last week
- your censor is my censor: weaponizing residual censorship to perform availability attacks☆22Aug 10, 2021Updated 5 years ago
- Detecting PowerShell Empire, Metasploit Meterpreter and Cobalt Strike agents by payload size sequence analysis and host correlation☆15Aug 17, 2018Updated 8 years ago
- Bro Detection Scripts☆10Mar 9, 2021Updated 5 years ago
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆83Aug 13, 2026Updated 2 months ago