zeek_anomaly_detector
zeek_anomaly_detector copied to clipboard
Add realtime function to the tool
We had an unused feature that is now a feature request:
parser.add_argument('-R', '--realtime',
help='Read the conn.log in real time.',
required=False,
type=bool,
default=False)
I will try to work on that part if it is not that urgent.
It's not urgent and we would love the contributions, thank you!
Has the usage of zat been abandoned? I found the dependency on zat and pyod, but no usage for zat. The only overlap of python version is 3.8. Shall I build on top of 3.8 for that? It is more easier to build on top of zat.
I have added the real-time functions. Please have a check to accept commits. Please let me know if there is problem then.