Alternatives and similar repositories for try-zeek

Users that are interested in try-zeek are comparing it to the libraries listed below

• sheharbano / Correlation-Framework

  View on GitHub
  A framework that correlates Bro events
  ☆18Oct 25, 2013Updated 12 years ago
• JustinAzoff / bro_scripts

  View on GitHub
  Analysis scripts for the Bro Intrusion Detection System
  ☆59Feb 26, 2014Updated 11 years ago
• anthonykasza / scratch_pad

  View on GitHub
  Bro Snippets
  ☆21Nov 7, 2014Updated 11 years ago
• zeek / cheat-sheet

  View on GitHub
  The Bro/Zeek language cheat sheet
  ☆53Mar 8, 2013Updated 12 years ago
• LiamRandall / BroMalware-Exercise

  View on GitHub
  ☆84Aug 7, 2013Updated 12 years ago
• zeek / zeek-netcontrol

  View on GitHub
  Connectors for the Zeek NetControl framework
  ☆19Feb 4, 2025Updated last year
• corelight / top-dns

  View on GitHub
  Top DNS Measurement for Bro
  ☆11Aug 22, 2020Updated 5 years ago
• 0xxon / bro-scripts

  View on GitHub
  Assorted scripts for Bro
  ☆12Feb 8, 2016Updated 10 years ago
• PingTrip / broctl-setcap

  View on GitHub
  Broctl plugin for automatically executing 'setcap' on each node after an install
  ☆13Dec 18, 2020Updated 5 years ago
• fox-it / bro-scripts

  View on GitHub
  Bro-IDS scripts
  ☆50Sep 12, 2016Updated 9 years ago
• initconf / scan-NG

  View on GitHub
  scan-detection policies for bro
  ☆16Jan 16, 2025Updated last year
• mavam / brospects

  View on GitHub
  Experimental Bro scripts with good prospects for the official bro-scripts repository.
  ☆20Nov 2, 2017Updated 8 years ago
• jonschipp / bro-scripts

  View on GitHub
  A collection of Bro scripts I've written
  ☆41Jun 5, 2015Updated 10 years ago
• lruppert / bro-scripts

  View on GitHub
  Utilities and scripts for bro-ids
  ☆23Jan 6, 2014Updated 12 years ago
• ncsa / bro-clickhouse

  View on GitHub
  ☆16Mar 28, 2019Updated 6 years ago
• zeek / zeek-sublime

  View on GitHub
  Zeek scripting language highlighting/support for Sublime Text
  ☆19Jul 20, 2021Updated 4 years ago
• LiamRandall / bro-scripts

  View on GitHub
  Bro scripts to be shared with the community
  ☆110Mar 6, 2013Updated 12 years ago
• eldryoth / ulyaoth

  View on GitHub
  Ulyaoth
  ☆18Jul 2, 2017Updated 8 years ago
• zeek / package-manager

  View on GitHub
  A package manager for Zeek
  ☆47Jan 8, 2026Updated last month
• MISP / ansible

  View on GitHub
  MISP - Ansible installation script
  ☆23Feb 16, 2019Updated 6 years ago
• sooshie / bro-scripts

  View on GitHub
  Various Bro scripts
  ☆96Jul 8, 2016Updated 9 years ago
• sethhall / bro-scripts

  View on GitHub
  Various Bro scripts
  ☆37May 20, 2014Updated 11 years ago
• grigorescu / binpac_quickstart

  View on GitHub
  ☆21Oct 16, 2021Updated 4 years ago
• g-clef / KafkaLogger

  View on GitHub
  Logging plugin to bro to send logs to a Kafka broker
  ☆20Nov 29, 2017Updated 8 years ago
• zeek / zeekctl

  View on GitHub
  Tool for managing Zeek deployments.
  ☆60Jan 27, 2026Updated 2 weeks ago
• adulau / pdns-toolkit

  View on GitHub
  Passive DNS visualization and Passive DNS server toolkit
  ☆35Mar 22, 2012Updated 13 years ago
• corelight / pycommunityid

  View on GitHub
  A Python implementation of the Community ID flow hashing standard
  ☆24Nov 29, 2023Updated 2 years ago
• grigorescu / bro-scripts

  View on GitHub
  Contributed Bro Scripts
  ☆30May 28, 2014Updated 11 years ago
• HKcyberstark / wazuh-ecs

  View on GitHub
  Parse wazuh[HIDS] alerts into ECS mapping using Filebeat
  ☆28Jul 21, 2020Updated 5 years ago
• CrowdStrike / cs-bro

  View on GitHub
  Bro scripts written by CrowdStrike Services
  ☆148May 3, 2021Updated 4 years ago
• zeek / zeek-aux

  View on GitHub
  Zeek Auxiliary Programs
  ☆27Feb 7, 2026Updated last week
• zeek / bro-scripts

  View on GitHub
  Misc. Bro scripts
  ☆64Jun 21, 2017Updated 8 years ago
• hosom / file-extraction

  View on GitHub
  Extract files from network traffic with Zeek.
  ☆102Mar 17, 2020Updated 5 years ago
• sethhall / bro-apt1

  View on GitHub
  This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.
  ☆51Feb 11, 2014Updated 12 years ago
• malware-kitten / bro_scripts

  View on GitHub
  A collection of bro_scripts and signatures
  ☆27Jun 26, 2019Updated 6 years ago
• blacktop / docker-bro

  View on GitHub
  Bro IDS Dockerfile
  ☆129Sep 14, 2019Updated 6 years ago
• EmergingThreats / et-luajit-scripts

  View on GitHub
  ☆75Feb 17, 2022Updated 3 years ago
• zeek / packages

  View on GitHub
  The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.
  ☆144Jan 29, 2026Updated 2 weeks ago
• hellocosmos / mitre-attck-suricata-automation

  View on GitHub
  Mitre ATT&CK and Suricata Rules Automation with AI & LLM
  ☆14Sep 28, 2024Updated last year