sysflow-telemetry / sf-collectorLinks
SysFlow collection probe
☆16Updated 2 months ago
Alternatives and similar repositories for sf-collector
Users that are interested in sf-collector are comparing it to the libraries listed below
Sorting:
- SysFlow edge processing pipeline☆18Updated last year
- Augmentation to Machine Readable CTI☆37Updated 4 months ago
- ☆15Updated 2 years ago
- ☆51Updated last month
- Red Canary's eBPF Sensor☆113Updated 7 months ago
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Updated 3 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆36Updated 3 years ago
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆36Updated 2 years ago
- Adversary Emulation Planner☆42Updated 3 weeks ago
- Firepit - STIX Columnar Storage☆17Updated last year
- Enables Zeek to communicate with Tenzir☆11Updated 2 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆124Updated 5 years ago
- SysFlow documentation and issues tracker☆46Updated last year
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆193Updated last year
- Open source endpoint agent providing host information to Zeek. [v2]☆90Updated last week
- OCA-wide documentation shared by all sub-projects and repositories☆33Updated last year
- A document tagging library☆33Updated 10 months ago
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆32Updated last year
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆23Updated 2 years ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆31Updated last year
- Zeek support for Community ID flow hashing.☆37Updated 2 years ago
- Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.☆324Updated last year
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆84Updated last month
- Extensions for Zeek's Intelligence Framework.☆11Updated 3 years ago
- A CALDERA plugin☆79Updated this week
- An implementation of a Windows Event Collector server running on GNU/Linux.☆90Updated last week
- Cisco Orbital - Osquery queries by Talos☆136Updated last year
- ☆65Updated last year
- ☆108Updated last year
- STIX 2.1 Visualizer, Attack and Activity Thread Graph for Threat Modeling☆33Updated last year