Zeek Libraries

5 Components & Libraries

Sortby

Zeek Libraries

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

The advertising slogans are: The names IVRE and DRUNK have been chosen as a tribute to "Le Taullier". IVRE is free software: you can redistribute it and/or modify it under the terms of the GNU Genera…

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

Slips is a powerful endpoint behavioral intrusion prevention and detection system that uses machine learning to detect malicious behaviors in network traffic. Slips can work with network traffic in r…

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

The ZAT Python package supports the processing and analysis of Zeek data with Pandas, scikit-learn, Kafka, and Spark Zeek already has a flexible, powerful scripting language why should I use ZAT?

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

Checkout our comprehensive documentation complete with tutorials, guides, and example quickstart deployments.

A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!

Want to see multiple Zeek logs for the same connection ID (uid)or file ID (fuid)? Here are the hits from files.log, http.log, andconn.log for a single uid: You can perform subnet searching on Zeek's…

Related tags

optical-character-recognition

nlp-scenarios

express