The Wayback Machine - https://web.archive.org/web/20220407015450/https://github.com/topics/zeek

#

zeek

Here are 112 public repositories matching this topic...

zeek / zeek

Open

ProtocolConfirmation() needs to check for analyzer_confirmation

1

pbcullen commented Apr 4, 2022

Regarding the deprecation of the protocol_confirmation event coming in Zeek 5.1... if an analyzer plugin uses only analyzer_confirmation(), that event doesn't ever get called. This is with Zeek 4.2. It seems this line in ProtocolConfirmation() should also check analyzer_confirmation - more specifically, `if ( ! protocol_conf

Read more

good first issue Type: Bug 🐛 Area: Scripting

Open

Option change handler invoked after zeek_done() event

1

Open

Bypassing Zeek's file extraction processor by twisting Content-Type

1

Find more good first issues

ivre

ivre / ivre

Open

Feature Request - "Show All Products:Ports"

1

aryanguenthner commented Apr 3, 2021

The current view is "15 Most Common Product/Ports"
Only seeing 15 Products limits the visibility into network recon.

Request is to add the option to "Show All Products Ports"
The ability to see all products is key to network enumeration.

![image](https

Read more

enhancement help wanted good first issue Hacktoberfest

Open

Store more data from Nmap scan results

Open

WebUI: generate a heatmap for "Map"

Find more good first issues

brimdata / brim

Open

Lingering error message from failed Space rename

1

philrz commented Nov 26, 2020

Repro is with Brim commit 617d8f1.

I've noticed a couple small glitches with Space renames that are shown in the attached video.

If a user goes in to rename the Space and makes no changes, hitting "Ok" brings up an error message. They can only get out by hitting the "X" or the Escape key. Technically the error messa

Read more

bug good first issue

Open

Offer a Preference to allow remote connections to zqd

Open

Brim hides the string value "(empty)"

2

Find more good first issues

SuperCowPowers / zat

Sponsor

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

python security kafka spark networking scikit-learn pandas bro data-analysis zeek zeek-analysis

Updated Mar 27, 2022
Jupyter Notebook

deepfence / PacketStreamer

⭐

⭐ Distributed tcpdump for cloud native environments ⭐

⭐

pcap secops suricata packet-sniffer network-analysis soc observability traffic-monitoring packet-capture zeek snort security-tools tcpdump-like infosectools forensics-tools

Updated Apr 6, 2022
Go

stratosphereips / StratosphereLinuxIPS

Slips. A machine learning-based Intrusion Prevention System (IDS/IPS). Free Software. Stratosphere Laboratory

docker machine-learning pcap ai detection ids pcap-files intrusion-prevention ips network-traffic zeek stratosphere-ips

Updated Apr 5, 2022
Python

tenzir / threatbus

Sponsor

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

ids threat-hunting cif misp threatintel sightings zeek threat-intelligence opencti threat-bus cif3 opencti-connector threat-intelligence-data

Updated Jan 27, 2022
Python

V1D1AN / S1EM

This project is a SIEM with SIRP and Threat Intel, all in one.

docker elasticsearch kibana logstash filebeat malware clamav suricata metricbeat traefik misp thehive cortex sigma yara zeek heimdall opencti mwdb arkime

Updated Apr 2, 2022
YARA

spicy

zeek / spicy

C++ parser generator for dissecting protocols & files.

security parsing zeek spicy spicy-parsers-takes overview-spicy zeek-analyzers spicy-manual spicy-binaries

Updated Apr 6, 2022
C++

DynamiteAI / dynamite-nsm

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

python elasticsearch kibana logstash netflow ipfix python3 dashboards suricata network-analysis agents network-traffic zeek dynamite-nsm

Updated Mar 8, 2022
Python

tylabs / dovehawk

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

threat-hunting misp zeek bro-ids threat-intelligence zeek-ids misp-sightings

Updated Jul 12, 2021
Zeek

hosom / file-extraction

Extract files from network traffic with Zeek.

bro extract-files zeek zeek-package

Updated Mar 17, 2020
Zeek

blacktop / docker-zeek

Zeek IDS Dockerfile

docker elasticsearch kafka ids network-monitoring zeek zeek-ids

Updated Mar 16, 2022
Zeek

zeek / broker

Zeek's Messaging Library

caf pubsub bro zeek

Updated Apr 3, 2022
C++

spitfire55 / MegaDev

Sponsor

Bro IDS + ELK Stack to detect and block data exfiltration

elasticsearch logstash scala filebeat bro zeek

Updated Oct 31, 2018
Bro

mytechnotalent / Zeek-Network-Security-Monitor

A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.

pcap hack network hacking bro cybersecurity network-monitoring lesson network-security-monitoring network-analysis cyber cyber-security network-traffic network-security zeek cyber-threat-intelligence conn cyber-security-team zeek-instance

Updated Sep 27, 2021
Zeek

shadonet / pfSense-pkg-zeek

Zeek (formerly Bro) Network Security Monitor package for pfSense router/firewall

javascript bash ssh php xml firewall ajax bro browse pfsense xml-rpc zeek pfsense-pkg-zeek pfsense-pkg-bro pfsense-router

Updated Jun 27, 2021
PHP

amzn / zeek-plugin-enip

Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards

zeek ics-security security-tools zeek-package

Updated Mar 9, 2021
Zeek

Truvis / CheatSheets

Collection of scripts, files, and tips to create and maintain networks, hack, and more!

windows linux security elasticsearch security-audit kibana logstash splunk snmp filebeat opnsense dashboards network-monitoring siem packetbeat pfsense cheatsheets zeek security-tools elkstack

Updated Jun 13, 2021

zeek / zeek-docs

Documentation for Zeek

security pcap dfir bro network-monitoring nsm zeek

Updated Apr 6, 2022
Zeek

amzn / zeek-plugin-s7comm

Zeek network security monitor plugin that enables parsing of the S7 protocol

zeek ics-security security-tools zeek-package

Updated Mar 23, 2022
Zeek

ethack / tht

Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science

docker threat-hunting zeek

Updated Apr 1, 2022
Shell

activecm / docker-zeek

Run zeek with zeekctl in docker

docker hacktoberfest zeek zeekctl

Updated Feb 24, 2022
Shell

zeek-flowmeter / zeek-flowmeter

A Zeek script to generate features based on timing, volume and metadata for traffic classification.

training flow machine-learning analysis ipv4 feature-extraction packet zeek classifiers cicflowmeter layer3 zeek-ids zeek-flowmeter ipv6-flows

Updated Nov 8, 2020
Zeek

NSkelsey / aaalm

Generate network maps from packet captures

network-visualization packet-capture zeek zeek-package

Updated Sep 15, 2019
JavaScript

theparanoids / spicy-noise

A Spicy protocol analyzer for WireGuard

networking traffic-analysis zeek wireguard monitoring-tool

Updated Aug 11, 2020
Zeek

amzn / zeek-plugin-bacnet

Zeek network security monitor plugin that enables parsing of the BACnet standard building controls protocol

zeek ics-security security-tools zeek-package

Updated Mar 9, 2021
Zeek

brimdata / brimcap

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)

pcap suricata zeek brim-desktop

Updated Apr 6, 2022
Go

SeisoLLC / zeek-kafka

A Zeek log writer plugin that publishes to Kafka.

security kafka zeek zeek-package seiso zeek-kafka

Updated Apr 5, 2022
Shell

amzn / zeek-plugin-tds

Zeek network security monitor plugin that enables parsing of the Tabular Data Stream (TDS) protocol

zeek security-tools zeek-package

Updated Mar 23, 2022
Zeek

Improve this page

Add a description, image, and links to the zeek topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the zeek topic, visit your repo's landing page and select "manage topics."