zeek / zeek-agent-v2Links
Open source endpoint agent providing host information to Zeek. [v2]
☆83Updated this week
Alternatives and similar repositories for zeek-agent-v2
Users that are interested in zeek-agent-v2 are comparing it to the libraries listed below
Sorting:
- Suricata rules for network anomaly detection☆164Updated 2 months ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆52Updated 2 years ago
- Mapping NSM rules to MITRE ATT&CK☆71Updated 4 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆151Updated 3 months ago
- Cisco Orbital - Osquery queries by Talos☆134Updated 9 months ago
- The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders…☆144Updated 3 weeks ago
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆35Updated 2 years ago
- OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://gi…☆93Updated 2 weeks ago
- The Sigma command line interface based on pySigma☆157Updated 2 months ago
- OSSEM Detection Model☆176Updated 2 years ago
- The Security Analyst’s Guide to Suricata☆56Updated last month
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆72Updated this week
- OSSEM Common Data Model☆55Updated 2 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆93Updated 3 years ago
- Technical add-on for Splunk related to TheHive/Cortex from TheHive project☆53Updated last month
- Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)☆26Updated last year
- Suricata Verification Tests - Testing Suricata Output☆109Updated this week
- Zeek support for Community ID flow hashing.☆35Updated last year
- ☆30Updated this week
- Anything Sysmon related from the MSTIC R&D team☆153Updated last year
- pySigma Elasticsearch backend☆54Updated last week
- 🚨ATTENTION🚨 The CVE mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as…☆238Updated last year
- Sensor Mappings to ATT&CK is a collection of resources to assist cyber defenders with understanding which sensors and events can help det…☆50Updated 3 months ago
- Mapping Corelight or Zeek data to Elastic Common Schema fields☆34Updated last week
- OSSEM Data Dictionaries☆61Updated 4 months ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆155Updated 4 months ago
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆64Updated last year
- ☆54Updated this week
- A MITRE Caldera plugin☆43Updated 7 months ago
- zeek-scripts☆43Updated 6 years ago