zeek topic
StratosphereLinuxIPS
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT...
ivre
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, colle...
zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
zui
Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.
S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
threatbus
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
PacketStreamer
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
dovehawk
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
dynamite-nsm
DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection
zat
Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark