Proprietario
corelight
36 repository indicizzati · Vedi su GitHub
-
community-id-spec
An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
Python · 197 stelle
-
raspi-corelight
Corelight@Home script
Shell · 46 stelle
-
zeek-community-id
Zeek support for Community ID flow hashing.
Zeek · 37 stelle
-
cwrap
Auto wrap C and C++ functions with instrumentation
Perl · 34 stelle
-
ecs-mapping
Mapping Corelight or Zeek data to Elastic Common Schema fields
33 stelle
-
ripple20
A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
Zeek · 32 stelle
-
zeek-long-connections
Zeek package for tracking long connections to report them before they have completed.
Zeek · 31 stelle
-
json-streaming-logs
Zeek package to create JSON formatted logs to stream into data analysis systems.
Zeek · 31 stelle
-
suricata_exporter
A Prometheus Exporter for Suricata
Go · 27 stelle
-
cve-2021-44228
Log4j Exploit Detection Logic for Zeek
Zeek · 19 stelle
-
corelight-client
Corelight Sensor API command-line client
Python · 17 stelle
-
json-tcp-lb
line based tcp load balancing proxy.
Go · 14 stelle
-
zeek-quic
Bro analyzer that detects Google's QUIC protocol
JavaScript · 11 stelle
-
ecs-logstash-mappings
Mapping Corelight or Zeek data to Elastic Common Schema logs
11 stelle
-
top-dns
Top DNS Measurement for Bro
Zeek · 10 stelle
-
zeek-spicy-openvpn
A Zeek OpenVPN protocol analyzer, based on Spicy.
Zeek · 9 stelle
-
ecs-templates
Corelight or Zeek Elastic Common Schema Templates
Python · 9 stelle
-
9 stelle
-
zeekjs
ZeekJS - Experimental JavaScript support for Zeek.
C++ · 8 stelle
-
zeek-openvpn
A Zeek OpenVPN protocol analyzer plugin.
JavaScript · 7 stelle
- 16 altri repository si trovano su Vedi su GitHub
-
Zeekified Aperta
corelight/bro-protosigs#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/bro-hardware#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/top-dns#2 · 1 commento · 1 reazione · 0 assegnatari ·
-
corelight/zeek-quic#3 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
CMake minimum version error Aperta
corelight/zeek-globload#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/ztest#1 · 1 commento · 0 reazioni · 0 assegnatari ·
-
Make ztest more Zeek-like Aperta
corelight/ztest#2 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
btest fails with Zeek v8.0.0 Aperta
corelight/CVE-2021-38647#4 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/CVE-2022-23270-PPTP#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/ripple20#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/CVE-2022-24497#2 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/CVE-2022-3602#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/CVE-2022-24491#2 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/CVE-2022-24491#3 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
Update to Zeek v4.1 Apertaenhancement
corelight/zeek-openvpn#4 · 0 commenti · 0 reazioni · 1 assegnatario ·
-
enhancement zeek-tweak
corelight/zeek-community-id#3 · 19 commenti · 2 reazioni · 0 assegnatari ·
-
enhancement good first issue
corelight/zeek-community-id#19 · 1 commento · 0 reazioni · 0 assegnatari ·
-
corelight/plotcap#4 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
ipv6 support Aperta
corelight/raspi-corelight#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/raspi-corelight#7 · 9 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/zeek-xor-exe-plugin#1 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
remove doneChan, idleCount Aperta
corelight/json-tcp-lb#7 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
bug question spec-ambiguity
corelight/community-id-spec#3 · 3 commenti · 0 reazioni · 0 assegnatari ·
-
enhancement
corelight/community-id-spec#4 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
question
corelight/community-id-spec#9 · 2 commenti · 0 reazioni · 0 assegnatari ·
-
Use case: anonymity Apertausecase
corelight/community-id-spec#10 · 1 commento · 1 reazione · 0 assegnatari ·
-
enhancement
corelight/community-id-spec#11 · 1 commento · 0 reazioni · 0 assegnatari ·
-
usecase
corelight/community-id-spec#13 · 0 commenti · 1 reazione · 0 assegnatari ·
-
Sharefulness - 4 tuple Apertaenhancement
corelight/community-id-spec#21 · 3 commenti · 0 reazioni · 0 assegnatari ·
-
Hash function performance Aperta
corelight/community-id-spec#22 · 0 commenti · 4 reazioni · 0 assegnatari ·
-
enhancement
corelight/community-id-spec#23 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
bug
corelight/community-id-spec#32 · 1 commento · 0 reazioni · 1 assegnatario ·
-
enhancement spec-ambiguity
corelight/community-id-spec#33 · 3 commenti · 0 reazioni · 1 assegnatario ·
-
Community ID without ports Aperta
corelight/community-id-spec#34 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
community ID decode Aperta
corelight/community-id-spec#36 · 1 commento · 0 reazioni · 0 assegnatari ·
-
good first issue
corelight/go-zeek-broker-ws#2 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/go-zeek-broker-ws#3 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
missing some rfc's ApertaNeed PCAPs
corelight/zeek-spicy-stun#3 · 7 commenti · 0 reazioni · 0 assegnatari ·
-
enhancement
corelight/zeek-spicy-stun#6 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/zeek-asyncrat-detector#4 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/zeek-long-connections#14 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/zeek-long-connections#15 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/zeek-long-connections#16 · 0 commenti · 1 reazione · 0 assegnatari ·
-
enhancement
corelight/cve-2021-44228#7 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
enhancement
corelight/cve-2021-44228#8 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/cve-2021-44228#23 · 1 commento · 0 reazioni · 0 assegnatari ·
-
DNS exfil regexes Apertaenhancement
corelight/cve-2021-44228#27 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
LDAPS fingerprinting Apertaenhancement
corelight/cve-2021-44228#28 · 0 commenti · 0 reazioni · 0 assegnatari ·
-
Parses wrong payload IP Aperta
corelight/cve-2021-44228#30 · 2 commenti · 0 reazioni · 0 assegnatari ·
-
corelight/cve-2021-44228#32 · 0 commenti · 0 reazioni · 0 assegnatari ·