Corelight, Inc.

Corelight is the most powerful network visibility solution for information security professionals, founded by the creators of open-source Zeek.

zeek-spicy-ipsec Public
A Zeek IPSec protocol analyzer based on Spicy.

Zeek 2 BSD-3-Clause 4 0 0 Updated Nov 3, 2022
zeek-cheatsheets Public
Bro Log Cheatsheets

232 35 0 0 Updated Nov 2, 2022
ecs-templates Public
Corelight or Zeek Elastic Common Schema Templates

Python 2 BSD-3-Clause 2 0 1 Updated Oct 31, 2022
ecs-mapping Public
Mapping Corelight or Zeek data to Elastic Common Schema fields

Python 26 BSD-3-Clause 15 2 1 Updated Oct 31, 2022
zeekjs Public
ZeekJS - Experimental JavaScript support for Zeek.

C++ 5 BSD-3-Clause 0 2 1 Updated Oct 31, 2022
ecs-logstash-mappings Public
Mapping Corelight or Zeek data to Elastic Common Schema logs

8 BSD-3-Clause 2 1 0 Updated Oct 28, 2022
callstranger-detector Public
Zeek Plugin that detects CallStranger (CVE-2020-12695) attempts (http://callstranger.com/)

Zeek 5 BSD-3-Clause 6 0 0 Updated Oct 27, 2022
plotcap Public
Plot packet and data rates over time given a PCAP file, with gnuplot.

Rust 4 BSD-3-Clause 1 0 1 Updated Oct 24, 2022
zeek-spicy-openvpn Public
A Zeek OpenVPN protocol analyzer, based on Spicy.

Zeek 3 BSD-3-Clause 2 0 0 Updated Oct 14, 2022
C2-detection-manjusaka Public
Detection of Manjusaka C2 framework

1 BSD-3-Clause 1 0 0 Updated Oct 13, 2022

Popular repositories