zeek-ids topic

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

tylabs

Zeek-Formatted Threat Intelligence Feeds

CriticalPathSecurity

Zeek IDS Dockerfile

blacktop

hardenedlinux

A completely automated anomaly detector Zeek network flows files (conn.log).

stratosphereips

A Zeek script to generate features based on timing, volume and metadata for traffic classification.

zeek-flowmeter