Alternatives and similar repositories for SEPTun

Users that are interested in SEPTun are comparing it to the libraries listed below

• pevma / SEPTun-Mark-II

  View on GitHub
  Suricata Extreme Performance Tuning guide - Mark II
  ☆121Apr 17, 2018Updated 7 years ago
• mixmodeai / bro_intel_linter

  View on GitHub
  Bro Intel Feed Linter
  ☆26Aug 30, 2019Updated 6 years ago
• ncsa / bro-doctor

  View on GitHub
  ☆24Mar 29, 2020Updated 5 years ago
• ncsa / bro-simple-scan

  View on GitHub
  ☆14Jan 14, 2026Updated 3 weeks ago
• zeek / time-machine

  View on GitHub
  Time-Machine Dynamic Bulk Packet Recorder
  ☆36Apr 21, 2025Updated 9 months ago
• hempnall / broyara

  View on GitHub
  integrating bro into yara
  ☆33Dec 9, 2014Updated 11 years ago
• rocknsm / rock

  View on GitHub
  Automated deployment scripts for the RockNSM network hunting distribution.
  ☆457Jul 2, 2023Updated 2 years ago
• defensivedepth / Sysmon_OSSEC

  View on GitHub
  OSSEC Decoder & Rulesets for Sysmon Events
  ☆15Jul 23, 2015Updated 10 years ago
• JustinAzoff / flow-indexer

  View on GitHub
  Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files
  ☆44May 9, 2024Updated last year
• StamusNetworks / scirius

  View on GitHub
  Scirius is a web application for Suricata ruleset management and threat hunting.
  ☆676Dec 23, 2025Updated last month
• zeek / bro-plugins

  View on GitHub
  (OBSOLETE) Plugins for Bro
  ☆53Sep 13, 2017Updated 8 years ago
• initconf / scan-NG

  View on GitHub
  scan-detection policies for bro
  ☆16Jan 16, 2025Updated last year
• EmergingThreats / et-luajit-scripts

  View on GitHub
  ☆75Feb 17, 2022Updated 3 years ago
• g-clef / KafkaLogger

  View on GitHub
  Logging plugin to bro to send logs to a Kafka broker
  ☆20Nov 29, 2017Updated 8 years ago
• jasonish / evebox

  View on GitHub
  Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search
  ☆482Jan 22, 2026Updated 3 weeks ago
• hillar / CDMCS

  View on GitHub
  Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch
  ☆61Feb 20, 2017Updated 8 years ago
• open-nsm / ContainNSM

  View on GitHub
  Dockerfiles for NSM tools
  ☆84Apr 14, 2017Updated 8 years ago
• tylabs / dovehawk

  View on GitHub
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Jul 12, 2021Updated 4 years ago
• PUNCH-Cyber / stoq

  View on GitHub
  An open source framework for enterprise level automated analysis.
  ☆396Jun 27, 2022Updated 3 years ago
• JustinAzoff / can-i-use-afpacket-fanout

  View on GitHub
  Validate if afpacket PACKET_FANOUT_HASH is working properly
  ☆25May 19, 2022Updated 3 years ago
• anthonykasza / scratch_pad

  View on GitHub
  Bro Snippets
  ☆21Nov 7, 2014Updated 11 years ago
• zeek / packages

  View on GitHub
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆144Jan 29, 2026Updated 2 weeks ago
• CrowdStrike / cs-bro

  View on GitHub
  Bro scripts written by CrowdStrike Services
  ☆148May 3, 2021Updated 4 years ago
• EmergingThreats / IDSDeathBlossom

  View on GitHub
  IDS Utility Belt For Automating/Testing Various Things
  ☆30Oct 14, 2020Updated 5 years ago
• pevma / Suricata-Logstash-Templates

  View on GitHub
  Templates for Kibana/Logstash to use with Suricata IDPS
  ☆81Mar 12, 2016Updated 9 years ago
• JustinAzoff / bro_scripts

  View on GitHub
  Analysis scripts for the Bro Intrusion Detection System
  ☆59Feb 26, 2014Updated 11 years ago
• ozuriexv / SublimeSuricata

  View on GitHub
  ☆35Dec 9, 2023Updated 2 years ago
• grigorescu / binpac_quickstart

  View on GitHub
  ☆21Oct 16, 2021Updated 4 years ago
• hosom / bro-phishing

  View on GitHub
  Detect Phishing with Bro IDS
  ☆18Feb 1, 2017Updated 9 years ago
• automayt / FlowPlotter

  View on GitHub
  Generates visualizations from the output of flow tools such as SiLK.
  ☆35Dec 8, 2016Updated 9 years ago
• salesforce / bro-sysmon

  View on GitHub
  How to Zeek Sysmon Logs!
  ☆103Feb 12, 2022Updated 4 years ago
• spitfire55 / MegaDev

  View on GitHub
  Bro IDS + ELK Stack to detect and block data exfiltration
  ☆46Oct 31, 2018Updated 7 years ago
• DCSO / balboa

  View on GitHub
  server for indexing and querying passive DNS observations
  ☆49Jan 12, 2026Updated last month
• micrictor / spl-spt

  View on GitHub
  Zeek plugin to generate data on per-packet sizes and intervals
  ☆14Apr 21, 2020Updated 5 years ago
• ikoniaris / thug-vagrant

  View on GitHub
  Vagrant configuration to setup a Thug honeyclient VM
  ☆20Feb 26, 2015Updated 10 years ago
• JustinAzoff / gotm

  View on GitHub
  Full packet capture with flow cutoff, rotation, and compression
  ☆15Sep 18, 2018Updated 7 years ago
• michalpurzynski / bro-gramming

  View on GitHub
  Bro IDS programs collection.
  ☆146Oct 16, 2019Updated 6 years ago
• SupportIntelligence / Icewater

  View on GitHub
  16,432 Free Yara rules created by
  ☆390Jun 1, 2019Updated 6 years ago
• secureworks / dalton

  View on GitHub
  Suricata, Snort and Zeek IDS rule and pcap testing system
  ☆512Jan 9, 2026Updated last month