zeek / zeek-agent-v2Links
Open source endpoint agent providing host information to Zeek. [v2]
☆81Updated this week
Alternatives and similar repositories for zeek-agent-v2
Users that are interested in zeek-agent-v2 are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆164Updated last month
- Mapping NSM rules to MITRE ATT&CK☆71Updated 4 years ago
- Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)☆81Updated last month
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆261Updated 2 years ago
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆70Updated 2 weeks ago
- Zeek support for Community ID flow hashing.☆35Updated last year
- ☆29Updated this week
- OSSEM Common Data Model☆55Updated 2 years ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Plugin providing native AF_Packet support for Zeek.☆34Updated last year
- Zeek package for tracking long connections to report them before they have completed.☆30Updated 4 months ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆52Updated 2 years ago
- Cisco Orbital - Osquery queries by Talos☆131Updated 9 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆151Updated 2 months ago
- OSSEM Detection Model☆176Updated 2 years ago
- A MITRE Caldera plugin☆43Updated 6 months ago
- A Zeek log writer plugin that publishes to Kafka.☆48Updated 4 months ago
- Suricata Verification Tests - Testing Suricata Output☆108Updated this week
- Zeek Training Materials/Products☆37Updated 3 months ago
- The Security Analyst’s Guide to Suricata☆56Updated last month
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated last month
- Import specific data sources into the Sigma generic and open signature format.☆78Updated 3 years ago
- ☆53Updated this week
- Documentation for Zeek☆50Updated this week
- Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)☆104Updated 11 months ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆188Updated 4 years ago
- OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://gi…☆93Updated this week
- OSSEM Data Dictionaries☆60Updated 4 months ago
- Anything Sysmon related from the MSTIC R&D team☆153Updated 11 months ago