28 results found Sort:

zeek
zeek zeek
1.2k
6.5k
other
351
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
bro nsm dfir pcap zeek security network-monitoring
Created 2012-07-06
17,538 commits to master branch, last one 17 hours ago
ivre
ivre ivre
646
3.6k
gpl-3.0
172
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, colle...
bro easm nmap zeek osint scans masscan network security scan-ports nmap-parser nmap-scripts hacktoberfest network-recon network-security projectdiscovery network-discovery nmap-results-analyse network-reconnaissance external-attack-surface-management
Created 2014-09-12
4,061 commits to master branch, last one 10 days ago
cisagov
Malcolm cisagov
335
2.0k
other
54
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
pcap zeek arkime infosec security suricata opensearch cybersecurity networksecurity network-security opensearch-dashboards networktrafficanalysis network-traffic-analysis
Created 2019-05-13
4,530 commits to main branch, last one 2 days ago
deepfence
PacketStreamer deepfence
251
1.9k
apache-2.0
12
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
soc pcap zeek snort secops suricata infosectools tcpdump-like hacktoberfest observability packet-capture packet-sniffer security-tools forensics-tools network-analysis traffic-monitoring
Created 2022-03-25
61 commits to main branch, last one about a year ago
cisagov
LME cisagov
74
916
other
23
Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secu...
elk log zeek elastic logging security elk-stack cybersecurity elasticsearch security-tools network-analysis
Created 2023-10-06
113 commits to main branch, last one 3 days ago
stratosphereips
StratosphereLinuxIPS stratosphereips
180
724
other
31
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT ...
ai ids ips pcap zeek docker gsoc-2023 gsoc-2024 machine-learning network-analysis network-security stratosphere-ips endpoint-protection intrusion-detection-system intrusion-prevention-system
Created 2015-12-08
12,963 commits to master branch, last one 18 days ago
tenzir
tenzir tenzir
89
651
bsd-3-clause
35
Tenzir is the data pipeline engine for security teams.
soc pcap siem zeek sigma dataops netflow security suricata pipelines secdataops hacktoberfest investigation threathunting incident-response
Created 2010-09-23
23,335 commits to main branch, last one 24 hours ago
SuperCowPowers
zat SuperCowPowers
107
429
mit
40
Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark
bro zeek kafka spark pandas python security networking scikit-learn data-analysis zeek-analysis
Created 2017-03-22
572 commits to main branch, last one 11 months ago
V1D1AN
S1EM V1D1AN
80
415
mit
18
This project is a SIEM with SIRP and Threat Intel, all in one.
n8n misp mwdb yara zeek sigma arkime cortex docker kibana malware opencti thehive filebeat logstash suricata zircolite velociraptor elasticsearch
Created 2021-05-11
638 commits to master branch, last one about a month ago
CriticalPathSecurity
Zeek-Intelligence-Feeds CriticalPathSecurity
46
346
mit
14
Zeek-Formatted Threat Intelligence Feeds
zeek malware phishing zeek-ids threatintel threat-intelligence
Created 2020-08-20
139 commits to master branch, last one 18 hours ago
tenzir
threatbus tenzir
16
260
bsd-3-clause
26
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
cif ids cif3 misp zeek opencti sightings threat-bus threatintel threat-hunting opencti-connector threat-intelligence threat-intelligence-data
This repository has been archived (exclude archived)
Created 2019-01-31
857 commits to main branch, last one 2 years ago
zeek
spicy zeek
37
253
other
23
C++ parser generator for dissecting protocols & files.
zeek spicy parsing security
Created 2020-04-06
3,731 commits to main branch, last one a day ago
activecm
rita activecm
23
216
gpl-3.0
4
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
c2 zeek beacons blue-team c2-detection log-analysis cyber-security security-tools threat-hunting anomaly-detection incident-response network-monitoring command-and-control intrusion-detection threat-intelligence network-traffic-analysis
Created 2024-06-27
57 commits to main branch, last one 4 months ago
DynamiteAI
dynamite-nsm DynamiteAI
22
166
gpl-3.0
11
DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection
zeek ipfix agents kibana python netflow python3 logstash suricata dashboards dynamite-nsm elasticsearch network-traffic network-analysis
Created 2019-06-17
1,370 commits to master branch, last one 2 years ago
ethack
tht ethack
19
122
mit
10
Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science
zeek docker threat-hunting
Created 2021-03-17
411 commits to main branch, last one 20 days ago
tylabs
dovehawk tylabs
24
122
mit
9
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
misp zeek bro-ids zeek-ids misp-sightings threat-hunting threat-intelligence
Created 2018-08-24
57 commits to master branch, last one 3 years ago
brimdata
brimcap brimdata
8
77
bsd-3-clause
7
Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)
pcap zeek suricata brim-desktop
Created 2021-03-27
1,511 commits to main branch, last one 2 months ago
stratosphereips
zeek_anomaly_detector stratosphereips
33
75
gpl-2.0
5
A completely automated anomaly detector Zeek network flows files (conn.log).
ids zeek python zeek-ids zeek-analysis network-security anomaly-detection intrusion-detection
Created 2019-08-03
85 commits to main branch, last one 4 months ago
Truvis
CheatSheets Truvis
12
74
unknown
7
Collection of scripts, files, and tips to create and maintain networks, hack, and more!
siem snmp zeek linux kibana splunk pfsense windows elkstack filebeat logstash opnsense security dashboards packetbeat cheatsheets elasticsearch security-audit security-tools network-monitoring
Created 2019-02-20
169 commits to master branch, last one 3 years ago
zeek
zeek-agent-v2 zeek
6
69
other
11
Open source endpoint agent providing host information to Zeek. [v2]
zeek
Created 2021-12-06
345 commits to main branch, last one 4 months ago
zeek
broker zeek
25
65
other
20
Zeek's Messaging Library
bro caf zeek pubsub
Created 2014-07-09
2,080 commits to master branch, last one 7 days ago
mytechnotalent
Zeek-Network-Security-Monitor mytechnotalent
11
61
apache-2.0
6
A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples...
bro conn hack pcap zeek cyber lesson hacking network cybersecurity zeek-instance cyber-security network-traffic network-analysis network-security network-monitoring cyber-security-team cyber-threat-intelligence network-security-monitoring
Created 2020-02-07
25 commits to main branch, last one 2 years ago
activecm
docker-zeek activecm
17
51
mit
4
Run zeek with zeekctl in docker
zeek docker zeekctl hacktoberfest
Created 2020-05-21
69 commits to master branch, last one 4 months ago
zeek
zeek-docs zeek
70
50
other
21
Documentation for Zeek
bro nsm dfir pcap zeek security network-monitoring
Created 2019-01-17
1,145 commits to master branch, last one a day ago
SeisoLLC
zeek-kafka SeisoLLC
15
46
apache-2.0
10
A Zeek log writer plugin that publishes to Kafka.
zeek kafka seiso security zeek-kafka zeek-package
Created 2020-12-31
80 commits to main branch, last one 7 months ago
amzn
zeek-plugin-enip amzn
15
45
bsd-3-clause
12
Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards
zeek ics-security zeek-package security-tools
Created 2019-10-04
25 commits to master branch, last one 9 months ago
signorrayan
SplunkThreatHunting signorrayan
7
38
unknown
1
This repository contains Splunk queries to hunt some anomalies
zeek splunk sysmon suricata dashboard fortigate threat-hunting anomaly-detection
Created 2022-04-08
65 commits to main branch, last one 2 years ago
corelight
zeek2es corelight
7
35
bsd-3-clause
5
A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!
zeek humio kibana python opensearch elasticsearch
Created 2021-12-28
140 commits to master branch, last one 2 years ago