Corelight, Inc.

Results 17 repositories owned by Corelight, Inc.

community-id-spec

164
Stars
25
Forks
Watchers

An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

bro-cheatsheets

232
Stars
35
Forks
Watchers

Bro Log Cheatsheets

CVE-2021-42292

16
Stars
6
Forks
Watchers

A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit.

cve-2021-44228

18
Stars
8
Forks
Watchers

Log4j Exploit Detection Logic for Zeek

cve-2022-26809

29
Stars
15
Forks
Watchers

Detects attempts and successful exploitation of CVE-2022-26809

cwrap

30
Stars
2
Forks
Watchers

Auto wrap C and C++ functions with instrumentation

ecs-mapping

25
Stars
14
Forks
Watchers

Mapping Corelight or Zeek data to Elastic Common Schema fields

http-stalling-detector

18
Stars
5
Forks
Watchers

Detect HTTP stalling attacks like slowloris with Bro

json-streaming-logs

26
Stars
10
Forks
Watchers

Bro script package to create JSON formatted logs to stream into data analysis systems.