GitHub Trending Zeek

Zeek-Formatted Threat Intelligence Feeds

GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor

Zeek Ethernet/IP and CIP Parser - CISA ICSNPP

Zeek Modbus Extension Scripts - CISA ICSNPP

Zeek GE SRTP Parser - CISA ICSNPP

Zeek DNP3 Extension Scripts - CISA ICSNPP

A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.

Snort_rules detection bad actors.

Zeek HART-IP Parser - CISA ICSNPP

Zeek Omron FINS Parser - CISA ICSNPP

Zeek Profinet I/O Context Manager Parser - CISA ICSNPP

A Zeek OpenVPN protocol analyzer, based on Spicy.

Zeek Training Materials/Products

Extracting and analyzing URLs from Emails for phishing events

PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

No repository description provided.

Zeek parser for Synchrophasor Data Transfer for Power Systems (C37.118)

A Zeek Wireguard protocol analyzer based on Spicy.

No repository description provided.

Add POST body excerpt to Bro's HTTP log

Zeek package to create JSON formatted logs to stream into data analysis systems.

A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.

Log4j Exploit Detection Logic for Zeek

Zeek package for tracking long connections to report them before they have completed.

No repository description provided.

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

A Zeek IPSec protocol analyzer based on Spicy.

Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies

A Zeek Parser for the IEC 104 protcol built using Spicy.

Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.