zeek/cheat-sheet external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

zeek/cheat-sheet

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/zeek/cheat-sheet)

Close

zeek / cheat-sheetView on GitHubMore

• External links
• Readme badge

The Bro/Zeek language cheat sheet

☆53Mar 8, 2013Updated 12 years ago

Alternatives and similar repositories for cheat-sheet

Users that are interested in cheat-sheet are comparing it to the libraries listed below

• sheharbano / Correlation-Framework

  View on GitHub
  A framework that correlates Bro events
  ☆18Oct 25, 2013Updated 12 years ago
• zeek / try-zeek

  View on GitHub
  Code for try.zeek.org.
  ☆18Updated this week
• zeek / bro-plugins

  View on GitHub
  (OBSOLETE) Plugins for Bro
  ☆53Sep 13, 2017Updated 8 years ago
• zeek / bro-scripts

  View on GitHub
  Misc. Bro scripts
  ☆64Jun 21, 2017Updated 8 years ago
• zeek / time-machine

  View on GitHub
  Time-Machine Dynamic Bulk Packet Recorder
  ☆36Apr 21, 2025Updated 10 months ago
• thnyheim / misp2bro

  View on GitHub
  Python script that gets IOC from MISP and converts it into BRO intel files.
  ☆13Apr 17, 2016Updated 9 years ago
• JustinAzoff / bro_scripts

  View on GitHub
  Analysis scripts for the Bro Intrusion Detection System
  ☆59Feb 26, 2014Updated 12 years ago
• anthonykasza / scratch_pad

  View on GitHub
  Bro Snippets
  ☆21Nov 7, 2014Updated 11 years ago
• sooshie / bro-scripts

  View on GitHub
  Various Bro scripts
  ☆96Jul 8, 2016Updated 9 years ago
• mixmodeai / bro_intel_linter

  View on GitHub
  Bro Intel Feed Linter
  ☆26Aug 30, 2019Updated 6 years ago
• zeek / zeek-aux

  View on GitHub
  Zeek Auxiliary Programs
  ☆27Updated this week
• initconf / brocon-15

  View on GitHub
  brocon-15 scripts
  ☆13Apr 3, 2017Updated 8 years ago
• jsiwek / zeek-cryptomining

  View on GitHub
  Detect cryptocurrency mining traffic with Zeek.
  ☆46Mar 3, 2021Updated 4 years ago
• michalpurzynski / bro-gramming

  View on GitHub
  Bro IDS programs collection.
  ☆146Oct 16, 2019Updated 6 years ago
• zeek / zeek-sublime

  View on GitHub
  Zeek scripting language highlighting/support for Sublime Text
  ☆19Jul 20, 2021Updated 4 years ago
• anthonykasza / beginner_brogramming

  View on GitHub
  scripts to help beginners program in Bro
  ☆21Aug 10, 2013Updated 12 years ago
• criticalstack / bro-scripts

  View on GitHub
  ☆72Nov 17, 2021Updated 4 years ago
• fox-it / bro-scripts

  View on GitHub
  Bro-IDS scripts
  ☆50Sep 12, 2016Updated 9 years ago
• exp0se / bro-intel-generator

  View on GitHub
  Script for generating Bro intel files from pdf or html reports
  ☆77Dec 7, 2015Updated 10 years ago
• zeek / zeek-netcontrol

  View on GitHub
  Connectors for the Zeek NetControl framework
  ☆19Feb 4, 2025Updated last year
• g-clef / KafkaLogger

  View on GitHub
  Logging plugin to bro to send logs to a Kafka broker
  ☆20Nov 29, 2017Updated 8 years ago
• zeek / zeek-docker

  View on GitHub
  Docker files for building Zeek.
  ☆89Oct 12, 2023Updated 2 years ago
• corelight / top-dns

  View on GitHub
  Top DNS Measurement for Bro
  ☆10Aug 22, 2020Updated 5 years ago
• auditNG / auditNG

  View on GitHub
  ☆11Mar 9, 2018Updated 7 years ago
• arosenmund / DCO

  View on GitHub
  ☆11Oct 16, 2022Updated 3 years ago
• adulau / pdns-qof-server

  View on GitHub
  Passive DNS server interface compliant to "Common Output Format"
  ☆10Sep 19, 2016Updated 9 years ago
• salesforce / bro-sysmon

  View on GitHub
  How to Zeek Sysmon Logs!
  ☆103Feb 12, 2022Updated 4 years ago
• sbabicz / tcpdump-bpf-cheatsheet

  View on GitHub
  Graphical model of a TCP/IP stack which can be used as a cheatsheet when developing BPF filters.
  ☆16Dec 10, 2019Updated 6 years ago
• CrowdStrike / cs-bro

  View on GitHub
  Bro scripts written by CrowdStrike Services
  ☆150May 3, 2021Updated 4 years ago
• mixmodeai / bro_amqp_plugin

  View on GitHub
  PacketSled's Bro AMQP Writer Plugin
  ☆11Aug 5, 2016Updated 9 years ago
• daveherrald / SA_plaso-app-for-splunk

  View on GitHub
  ☆16Apr 16, 2017Updated 8 years ago
• ikoniaris / kippo2elasticsearch

  View on GitHub
  Transfer Kippo data to ElasticSearch
  ☆18Dec 14, 2015Updated 10 years ago
• siltecon / bronion

  View on GitHub
  Import Bro logs from SecurityOnion into Logstash
  ☆15Nov 10, 2015Updated 10 years ago
• rocknsm / rock-docs

  View on GitHub
  Documentation for ROCK NSM
  ☆27Apr 7, 2021Updated 4 years ago
• andrewbeard / broworkshop

  View on GitHub
  Materials for the BSides NoVA/Charleston 2018 Bro Workshop
  ☆14Jun 4, 2025Updated 8 months ago
• zeek / zeek-agent-framework

  View on GitHub
  This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2
  ☆14Oct 12, 2020Updated 5 years ago
• PidgeyL / MISP-Extractor

  View on GitHub
  Extract information from MISP via the API
  ☆16Jul 18, 2016Updated 9 years ago
• corelight / log-add-http-post-bodies

  View on GitHub
  Add POST body excerpt to Bro's HTTP log
  ☆14Dec 10, 2025Updated 2 months ago
• mavam / brospects

  View on GitHub
  Experimental Bro scripts with good prospects for the official bro-scripts repository.
  ☆20Nov 2, 2017Updated 8 years ago