set-element / auditdBroFrameworkLinks
The Auditd Framework logs and applies security policy to linux auditd data
☆15Updated 7 years ago
Alternatives and similar repositories for auditdBroFramework
Users that are interested in auditdBroFramework are comparing it to the libraries listed below
Sorting:
- Generates visualizations from the output of flow tools such as SiLK.☆35Updated 9 years ago
- Cli interface to threatcrowd.org☆20Updated 8 years ago
- Help summarize a PCAP file☆33Updated 14 years ago
- ☆85Updated 12 years ago
- Unpack MIME attachments from a file and check them against virustotal.com☆44Updated 9 years ago
- Detect Phishing with Bro IDS☆19Updated 8 years ago
- Cyber Defence Monitoring Course Suite :: Suricata, Bro, Moloch☆61Updated 8 years ago
- integrating bro into yara☆33Updated 11 years ago
- A Docker container for Moloch based on minimal Debian☆13Updated 8 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 5 years ago
- brocon-15 scripts☆13Updated 8 years ago
- Ansible playbook to install Malware Information Sharing Platform (MISP)☆17Updated 10 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆41Updated 5 years ago
- ☆20Updated 9 years ago
- Detect malicious domain, Blablablablabla☆26Updated 8 years ago
- scan-detection policies for bro☆16Updated 11 months ago
- A set of Bash scripts that allows you to repeatably collect and compare baseline audit data from Linux and Windows systems☆20Updated 12 years ago
- ☆49Updated 10 years ago
- Passive Network Audit Framework☆32Updated 7 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆39Updated last year
- An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk☆23Updated 7 years ago
- Bro-IDS scripts☆50Updated 9 years ago
- Passive DNS V2☆60Updated 11 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆46Updated 7 years ago
- viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…☆74Updated 8 years ago
- DNS Enumeration and Reconnaissance Tool☆36Updated 9 years ago
- Home to the ActorTrackr source code☆24Updated 8 years ago
- Honeypot log processor to create OTX Pulse entries☆28Updated last year
- Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.☆98Updated 11 years ago
- Vagrant configuration to setup a Thug honeyclient VM☆20Updated 10 years ago