zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

The open-source pipeline and storage engine for security.

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

This project is a SIEM with SIRP and Threat Intel, all in one.

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

Zeek-Formatted Threat Intelligence Feeds

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

C++ parser generator for dissecting protocols & files.

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

Extract files from network traffic with Zeek.

Zeek IDS Dockerfile

Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science

Zeek's Messaging Library

A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.

Collection of scripts, files, and tips to create and maintain networks, hack, and more!