zeek / zeek-agent-v2
Open source endpoint agent providing host information to Zeek. [v2]
☆77Updated 5 months ago
Alternatives and similar repositories for zeek-agent-v2:
Users that are interested in zeek-agent-v2 are comparing it to the libraries listed below
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆69Updated 2 months ago
- Suricata rules for network anomaly detection☆156Updated last week
- Suricata Verification Tests - Testing Suricata Output☆105Updated this week
- The Security Analyst’s Guide to Suricata☆54Updated 9 months ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆79Updated 5 months ago
- ☆29Updated this week
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated 2 weeks ago
- OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://gi…☆91Updated this week
- Mapping NSM rules to MITRE ATT&CK☆69Updated 4 years ago
- The Sigma command line interface based on pySigma☆147Updated last month
- Dettectinator - The Python library to your DeTT&CT YAML files.☆109Updated 2 months ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Cisco Orbital - Osquery queries by Talos☆130Updated 7 months ago
- OSSEM Detection Model☆177Updated 2 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated last week
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆91Updated 2 years ago
- Sigma rules from Joe Security☆207Updated 4 months ago
- Zeek-Formatted Threat Intelligence Feeds☆356Updated this week
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆261Updated 2 years ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- ☆125Updated last year
- pySigma Elasticsearch backend☆50Updated last week
- Anything Sysmon related from the MSTIC R&D team☆150Updated 9 months ago
- Plugin providing native AF_Packet support for Zeek.☆34Updated 11 months ago
- Zeek IDS Dockerfile☆101Updated 2 years ago
- A curated list of awesome things related to TheHive & Cortex☆177Updated 3 years ago
- A CALDERA plugin☆75Updated 2 weeks ago
- A Zeek log writer plugin that publishes to Kafka.☆46Updated 2 months ago
- Rules generated from our investigations.☆192Updated last week
- OSSEM Data Dictionaries☆59Updated 2 months ago