Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.
-
Updated
May 1, 2022 - JavaScript
#
nsm
Here are 48 public repositories matching this topic...
good first issue
A good place to get started working with Zeek.
Type: Bug 🐛
Unexpected behavior or output.
Area: Scripting
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
-
Updated
Apr 16, 2021
Suricata git repository maintained by the OISF
-
Updated
May 1, 2022 - C
The Hybrid/Multi-cloud IP Service Mesh
-
Updated
Oct 28, 2021 - Go
** README ** This repo has MOVED to https://github.com/quadrantsec/sagan
-
Updated
Feb 9, 2021
The default package source of the Zeek Package Manager
-
Updated
Apr 28, 2022
Suricata rules for network anomaly detection
cybersecurity
suricata
ids
network-monitoring
threat-hunting
nsm
network-security
threat-intelligence
anomaly-detection
suricata-rule
cyber-threat-intelligence
lateral-movement
-
Updated
Feb 7, 2022
Cyber Defence Monitoring Course Suite :: Suricata, Moloch and others
-
Updated
Apr 28, 2022 - Jupyter Notebook
Assists music production by grouping standalone programs into sessions. Community version of "Non Session Manager".
-
Updated
Apr 14, 2022 - C++
Threat Hunting with ELK Workshop (InfoSecWorld 2017)
-
Updated
Oct 31, 2017 - PowerShell
Mapping NSM rules to MITRE ATT&CK
-
Updated
Aug 29, 2020
A package manager for Zeek
-
Updated
Apr 28, 2022 - Python
Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
-
Updated
May 15, 2020 - Zeek
Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))
-
Updated
Apr 17, 2020
A Docker container for Moloch based on ubuntu
-
Updated
Jan 24, 2022 - Shell
McAfee SIEM API Python wrapper
api
alarm
wrapper
library
query
monitoring
filter
receiver
api-wrapper
pyhton
siem
nsm
datasource
watchlist
esm
erc
mcafee
msiem
acknowledge
-
Updated
Aug 10, 2021 - Python
Network Service Mesh examples repo
-
Updated
Oct 28, 2021 - Makefile
Monitors Bro NSM logs and sends them to Elasticsearch
-
Updated
Sep 3, 2017 - Python
A saltstack formula to install BRO network security monitor on RHEL or Debian based systems
-
Updated
Aug 18, 2019 - SaltStack
Improve this page
Add a description, image, and links to the nsm topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the nsm topic, visit your repo's landing page and select "manage topics."
In a package of ours we are accessing a Broker::Store handle in a change handler. We got bitten by "invalid Broker store handle" when the change handler is invoked during/after shutdown.
Chatting with @rsmmr / @ckreibich about change handlers and broker stores, there was slight surprise to hear that these are invoked after
zeek_done()and it was suggested to open a ticket.The following re