zeek / zeek-netcontrol
Connectors for the Zeek NetControl framework
☆19Updated 2 years ago
Alternatives and similar repositories for zeek-netcontrol:
Users that are interested in zeek-netcontrol are comparing it to the libraries listed below
- integrating bro into yara☆33Updated 10 years ago
- vagrant multi-machine: Moloch, Bro,Suricata,ElasticSearch,Kibana☆41Updated 10 years ago
- Bro Intel Feed Linter☆26Updated 5 years ago
- This is a script module for Bro that encapsulates and detects activity related to the Mandiant APT1 report.☆47Updated 10 years ago
- Bro Snippets☆21Updated 10 years ago
- Bro IDS + ELK Stack to detect and block data exfiltration☆47Updated 6 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆35Updated last year
- Bro-IDS scripts☆50Updated 8 years ago
- A collection of Bro scripts I've written☆40Updated 9 years ago
- Generates visualizations from the output of flow tools such as SiLK.☆35Updated 8 years ago
- ☆72Updated 3 years ago
- Broctl plugin for automatically executing 'setcap' on each node after an install☆13Updated 4 years ago
- scan-detection policies for bro☆15Updated this week
- Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files☆44Updated 8 months ago
- ☆85Updated 11 years ago
- Passive DNS visualization and Passive DNS server toolkit☆35Updated 12 years ago
- ☆24Updated 4 years ago
- A Docker container for Moloch based on minimal Debian☆26Updated 8 years ago
- ☆23Updated 4 years ago
- Detect Phishing with Bro IDS☆18Updated 7 years ago
- A framework that correlates Bro events☆18Updated 11 years ago
- The Bro/Zeek language cheat sheet☆51Updated 11 years ago
- ☆15Updated 9 months ago
- Meeting notes☆15Updated 8 years ago
- CVE Builder script that generates STIX formatted Exploit Target objects☆18Updated 8 years ago