Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

BROSTAR simplifies the datamanegement of the Basis Registratie Ondergrond (BRO)

Documentation for Zeek

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.

Zeek's Messaging Library

A package manager for Zeek

Zeek TSV log reader

My NSMBW Levels

Go implementation of the Community ID flow hashing standard

This is a simple ai made by us

OWAMP protocol analyzer plugin for Bro/Zeek

Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files

A python package that is able to communicate with the REST API of the BRO (BasisRegistratie Ondergrond).

Bro - A super fast stylesheet language for cool kids! Alternative to SassC, DartSass SassJS and Less.

An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

Splunk configs for Security Onion

A sample application showing how to retrieve CPTs from the BRO with the bro python package.

day 02 task