sysflow-telemetry / sf-collectorLinks
SysFlow collection probe
☆16Updated 3 weeks ago
Alternatives and similar repositories for sf-collector
Users that are interested in sf-collector are comparing it to the libraries listed below
Sorting:
- SysFlow edge processing pipeline☆17Updated 9 months ago
- ☆50Updated last month
- Augmentation to Machine Readable CTI☆36Updated 2 months ago
- OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/c…☆42Updated last year
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆31Updated last year
- Adversary Emulation Planner☆42Updated last year
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆79Updated 2 years ago
- Connect - Stream - Observe - Respond | Morio provides the plumbing for your observability needs☆27Updated last week
- Python samples and utilities for Chronicle APIs☆86Updated 3 weeks ago
- Firepit - STIX Columnar Storage☆16Updated last year
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Updated 3 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- A Zeek package that detects Zoom logins and meeting joins☆12Updated 5 years ago
- Zeek package to generate a SMB client fingerprint☆27Updated 5 years ago
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆23Updated last year
- A CALDERA plugin☆79Updated 3 weeks ago
- Open source endpoint agent providing host information to Zeek. [v2]☆86Updated last week
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 3 years ago
- ☆108Updated last year
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- A document tagging library☆30Updated 7 months ago
- An elevated STIX representation of the MITRE ATT&CK Groups knowledge base☆23Updated 3 years ago
- Zeek plugin to generate data on per-packet sizes and intervals☆14Updated 5 years ago
- OASIS OpenC2 TC: Repository for submitting and reviewing OpenC2 use cases relevant to the work of the OpenC2 Language Subcommittee (LSC)☆28Updated 3 years ago
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆35Updated last year
- The Security Analyst’s Guide to Suricata☆60Updated 6 months ago
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated last year
- CyCAT.org taxonomies☆15Updated 4 years ago
- Red Canary's eBPF Sensor☆111Updated 4 months ago
- Extensions for Zeek's Intelligence Framework.☆11Updated 3 years ago