Tool for managing Zeek deployments.
☆62Sep 19, 2026Updated this week
Alternatives and similar repositories for zeekctl
Users that are interested in zeekctl are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Zeek package for tracking long connections to report them before they have completed.☆31Nov 25, 2025Updated 9 months ago
- Code for try.zeek.org.☆20Updated this week
- Web based Active Directory management☆11Dec 18, 2024Updated last year
- Detect cryptocurrency mining traffic with Zeek.☆46Mar 3, 2021Updated 5 years ago
- A set of tools and procedures for automating NSM and NIDS deployments in AWS☆15Oct 16, 2020Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A RESTful API frontend for Stenographer☆54Dec 7, 2022Updated 3 years ago
- Bro/Zeek integration with osquery☆94Nov 2, 2020Updated 5 years ago
- Documentation for ROCK NSM☆28Apr 7, 2021Updated 5 years ago
- ☆17Mar 24, 2026Updated 6 months ago
- A packer utility to create and capture DFIR Image for use AWS & Azure☆15Oct 18, 2019Updated 6 years ago
- Zeek Junk Drawer - Just some scripts and a place to put them☆28Sep 22, 2020Updated 6 years ago
- Parse wazuh[HIDS] alerts into ECS mapping using Filebeat☆28Jul 21, 2020Updated 6 years ago
- A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the…☆62Nov 26, 2025Updated 9 months ago
- (DEPRECATED) Python bindings for Broccoli☆13Apr 26, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.☆145Sep 16, 2026Updated last week
- Add POST body excerpt to Bro's HTTP log☆14Dec 10, 2025Updated 9 months ago
- Automated deployment scripts for the RockNSM network hunting distribution.☆453Jul 2, 2023Updated 3 years ago
- Rule sets for Sagan☆105Jan 7, 2021Updated 5 years ago
- A set of zeek scripts providing a module for tracking and correlating abnormal DNS behavior.☆35Jan 4, 2025Updated last year
- Extract files from network traffic with Zeek.☆102Mar 17, 2020Updated 6 years ago
- Plugin for Zeek/Bro which provides http2 decoder/analyzer☆30Jun 11, 2024Updated 2 years ago
- ☆39Dec 4, 2023Updated 2 years ago
- Python 3 Wrapper for the BinaryEdge API https://www.binaryedge.io/☆20Jun 23, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Bro IDS Dockerfile☆129Sep 14, 2019Updated 7 years ago
- Top Disk Usage. You want to know what is using all your disk space ? This command-line tool estimates the disk space occupied by all file…☆17Jul 1, 2023Updated 3 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆70Dec 2, 2022Updated 3 years ago
- Zeek IDS Dockerfile☆100Dec 5, 2022Updated 3 years ago
- A few snippets to show how suricata stats can end up in Influx DB using logstash☆12Jul 11, 2016Updated 10 years ago
- Docker files for building Zeek.☆89Oct 12, 2023Updated 2 years ago
- Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.☆7,991Updated this week
- The Bro/Zeek language cheat sheet☆53Mar 8, 2013Updated 13 years ago
- Apache Metron☆60Oct 8, 2020Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets☆145Oct 12, 2020Updated 5 years ago
- Quick and Dirty full-connect scanner. Meant for when `nmap -Pn -p-` is too slow☆20Jul 1, 2016Updated 10 years ago
- setup zeek, previously Bro IDS☆17Sep 17, 2026Updated last week
- Sometimes a hunt leads to an endpoint with no instrumentation or EDR tooling. We still need to put something to the left of the equals si…☆21Sep 16, 2026Updated last week
- Top DNS Measurement for Bro☆10Aug 22, 2020Updated 6 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Feb 20, 2024Updated 2 years ago
- Splunk app to support presentation at .conf2015 on free security tools and Splunk☆10Sep 24, 2015Updated 11 years ago