zeek

Here are 128 public repositories matching this topic...

zeek / zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

security pcap dfir bro network-monitoring nsm zeek

Updated Oct 21, 2022
C++

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Updated Oct 21, 2022
Python

brimdata / brim

Star

Desktop application to efficiently search and analyze super-structured data. Powered by Zed.

electron react search data etl logs zed zeek

Updated Oct 21, 2022
TypeScript

cisagov / Malcolm

Star

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

security pcap cybersecurity suricata infosec network-security zeek opensearch network-traffic-analysis networksecurity arkime opensearch-dashboards networktrafficanalysis

Updated Oct 20, 2022
Python

deepfence / PacketStreamer

Star

⭐

⭐ Distributed tcpdump for cloud native environments ⭐

⭐

pcap secops suricata packet-sniffer network-analysis soc hacktoberfest observability traffic-monitoring packet-capture zeek snort security-tools tcpdump-like infosectools forensics-tools

Updated Oct 17, 2022
Go

SuperCowPowers / zat

Sponsor

Star

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

python security kafka spark networking scikit-learn pandas bro data-analysis zeek zeek-analysis

Updated Apr 7, 2022
Jupyter Notebook

stratosphereips / StratosphereLinuxIPS

Star

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

docker machine-learning pcap ai ids ips network-analysis network-security zeek intrusion-detection-system endpoint-protection intrusion-prevention-system stratosphere-ips

Updated Oct 21, 2022
Python

V1D1AN / S1EM

Star

This project is a SIEM with SIRP and Threat Intel, all in one.

Updated Oct 21, 2022
YARA

tenzir / threatbus

Sponsor

Star

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

ids threat-hunting cif misp threatintel sightings zeek threat-intelligence opencti threat-bus cif3 opencti-connector threat-intelligence-data

Updated May 16, 2022
Python

idaholab / Malcolm

Star

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.