Alternatives and similar repositories for zeek-tenzir

Users that are interested in zeek-tenzir are comparing it to the libraries listed below

• J-Gras / intel-extensions

  View on GitHub
  Extensions for Zeek's Intelligence Framework.
  ☆11Mar 1, 2022Updated 3 years ago
• CriticalPathSecurity / zeek-scripts

  View on GitHub
  Bro Detection Scripts
  ☆10Mar 9, 2021Updated 4 years ago
• brimdata / zeek-tsv-http-plugin

  View on GitHub
  A Zeek plugin to POST logs over HTTP.
  ☆13Feb 10, 2020Updated 6 years ago
• micrictor / spl-spt

  View on GitHub
  Zeek plugin to generate data on per-packet sizes and intervals
  ☆14Apr 21, 2020Updated 5 years ago
• theparanoids / spicy-noise

  View on GitHub
  A Spicy protocol analyzer for WireGuard
  ☆29Aug 11, 2020Updated 5 years ago
• corelight / zeek-community-id

  View on GitHub
  Zeek support for Community ID flow hashing.
  ☆37Jul 11, 2023Updated 2 years ago
• corelight / pycommunityid

  View on GitHub
  A Python implementation of the Community ID flow hashing standard
  ☆24Nov 29, 2023Updated 2 years ago
• satta / suricata-json-schema

  View on GitHub
  Suricata JSON schema project
  ☆12Jan 5, 2020Updated 6 years ago
• tenzir / dockerized-zeek

  View on GitHub
  Dockerized Zeek
  ☆12Mar 9, 2024Updated last year
• corelight / conn-burst

  View on GitHub
  A Bro package to identify connections that are bursting (lots of data and transferring quickly).
  ☆13Oct 15, 2020Updated 5 years ago
• precurse / zeek-httpattacks

  View on GitHub
  This module detects HTTP requests that are non RFC compliant and used for smuggling
  ☆12Mar 16, 2023Updated 2 years ago
• mixmodeai / bro_intel_linter

  View on GitHub
  Bro Intel Feed Linter
  ☆26Aug 30, 2019Updated 6 years ago
• hardenedlinux / nixpkgs-hardenedlinux

  View on GitHub
  ☆16Dec 15, 2025Updated 2 months ago
• corelight / json-tcp-lb

  View on GitHub
  line based tcp load balancing proxy.
  ☆14Jun 18, 2024Updated last year
• opendxl / opendxl-environment

  View on GitHub
  Pre-configured environment that supports the development and running of OpenDXL solutions
  ☆13Mar 29, 2021Updated 4 years ago
• D4-project / architecture

  View on GitHub
  Architecture - design and implementation of the D4 project architecture
  ☆16Jul 3, 2025Updated 7 months ago
• tylabs / dovehawk

  View on GitHub
  Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
  ☆122Jul 12, 2021Updated 4 years ago
• opendxl / opendxl-broker

  View on GitHub
  OpenDXL Broker is an open source version of a Data Exchange Layer (DXL) broker
  ☆14Feb 11, 2024Updated 2 years ago
• GTrunSec / Jupyter-data-science-environment

  View on GitHub
  Including Haskell, R, Julia,Python and Jupyter Kernels generated by Nix
  ☆13Mar 6, 2023Updated 2 years ago
• corelight / log-add-http-post-bodies

  View on GitHub
  Add POST body excerpt to Bro's HTTP log
  ☆14Dec 10, 2025Updated 2 months ago
• initconf / scan-NG

  View on GitHub
  scan-detection policies for bro
  ☆16Jan 16, 2025Updated last year
• emojifier / emojifier

  View on GitHub
  Set your logs on fire with Emoji-🔥!
  ☆15Oct 9, 2020Updated 5 years ago
• hashlookup / private-search-set

  View on GitHub
  Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.
  ☆16Jan 10, 2025Updated last year
• DCSO / balboa

  View on GitHub
  server for indexing and querying passive DNS observations
  ☆49Jan 12, 2026Updated last month
• corelight / corelight-client

  View on GitHub
  Corelight Sensor API command-line client
  ☆17Jan 9, 2026Updated last month
• fatemabw / bro-scripts

  View on GitHub
  ☆16Feb 13, 2020Updated 6 years ago
• theparanoids / rdfp

  View on GitHub
  Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
  ☆40Jun 20, 2023Updated 2 years ago
• corelight / detect-ransomware-filenames

  View on GitHub
  ☆18Dec 20, 2024Updated last year
• ncsa / bro-simple-scan

  View on GitHub
  ☆14Jan 14, 2026Updated last month
• esnet / zeek-exporter

  View on GitHub
  Prometheus Exporter for Zeek
  ☆20Aug 13, 2025Updated 6 months ago
• zeek / package-manager

  View on GitHub
  A package manager for Zeek
  ☆47Jan 8, 2026Updated last month
• 0xl3x1 / zeek-EternalSafety

  View on GitHub
  Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.
  ☆19Aug 21, 2025Updated 5 months ago
• initconf / smtp-url-analysis

  View on GitHub
  Extracting and analyzing URLs from Emails for phishing events
  ☆21Oct 22, 2020Updated 5 years ago
• grigorescu / binpac_quickstart

  View on GitHub
  ☆21Oct 16, 2021Updated 4 years ago
• telekom-security / listbot

  View on GitHub
  🤖 Daily updated translation maps for T-Pot
  ☆22Apr 25, 2024Updated last year
• ncsa / bro-doctor

  View on GitHub
  ☆24Mar 29, 2020Updated 5 years ago
• mozilla / zept

  View on GitHub
  INACTIVE - http://mzl.la/ghe-archive - Zeek Extreme Performance Tuning
  ☆26Oct 10, 2019Updated 6 years ago
• activecm / docker-zeek

  View on GitHub
  Run zeek with zeekctl in docker
  ☆62Sep 12, 2024Updated last year
• zeek / zeek-osquery

  View on GitHub
  Bro/Zeek integration with osquery
  ☆94Nov 2, 2020Updated 5 years ago