zeek / zeek-agent-v2
Open source endpoint agent providing host information to Zeek. [v2]
☆77Updated 4 months ago
Alternatives and similar repositories for zeek-agent-v2:
Users that are interested in zeek-agent-v2 are comparing it to the libraries listed below
- Suricata rules for network anomaly detection☆156Updated 3 weeks ago
- Suricata Verification Tests - Testing Suricata Output☆105Updated this week
- Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…☆68Updated last month
- The Security Analyst’s Guide to Suricata☆54Updated 9 months ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆149Updated this week
- A MITRE Caldera plugin☆41Updated 3 months ago
- ☆29Updated this week
- Mapping NSM rules to MITRE ATT&CK☆70Updated 4 years ago
- A Ruleset to enhance detection capabilities of Ossec using Sysmon☆91Updated 2 years ago
- A Zeek log writer plugin that publishes to Kafka.☆46Updated 2 months ago
- OSSEM Detection Model☆175Updated 2 years ago
- OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://gi…☆91Updated this week
- pySigma Elasticsearch backend☆50Updated last week
- Anything Sysmon related from the MSTIC R&D team☆150Updated 9 months ago
- Cisco Orbital - Osquery queries by Talos☆130Updated 6 months ago
- 🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.☆262Updated last year
- Zeek support for Community ID flow hashing.☆35Updated last year
- PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.☆151Updated last year
- Golang library that implements a sigma log rule parser and match engine.☆94Updated 7 months ago
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆123Updated 4 years ago
- Plugin providing native AF_Packet support for Zeek.☆34Updated 11 months ago
- S2AN - Mapper of Sigma/Suricata Rules/Signatures ➡️ MITRE ATT&CK Navigator☆85Updated 2 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆51Updated 2 years ago
- The FASTEST way to consume threat intel.☆68Updated last year
- ☆48Updated last week
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆61Updated 10 months ago
- ☆50Updated this week
- A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for…☆34Updated 2 years ago
- The Sigma command line interface based on pySigma☆146Updated 2 weeks ago
- SIGMA UI is a free open-source application based on the Elastic stack and Sigma Converter (sigmac)☆185Updated 3 years ago