Owner

corelight

36 indexed repositories · View on GitHub

• community-id-spec

  An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

  Python · 197 stars

• raspi-corelight

  Corelight@Home script

  Shell · 46 stars

• zeek-community-id

  Zeek support for Community ID flow hashing.

  Zeek · 37 stars

• cwrap

  Auto wrap C and C++ functions with instrumentation

  Perl · 34 stars

• ecs-mapping

  Mapping Corelight or Zeek data to Elastic Common Schema fields

  33 stars

• ripple20

  A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

  Zeek · 32 stars

• zeek-long-connections

  Zeek package for tracking long connections to report them before they have completed.

  Zeek · 31 stars

• json-streaming-logs

  Zeek package to create JSON formatted logs to stream into data analysis systems.

  Zeek · 31 stars

• suricata_exporter

  A Prometheus Exporter for Suricata

  Go · 27 stars

• cve-2021-44228

  Log4j Exploit Detection Logic for Zeek

  Zeek · 19 stars

• corelight-client

  Corelight Sensor API command-line client

  Python · 17 stars

• json-tcp-lb

  line based tcp load balancing proxy.

  Go · 14 stars

• zeek-quic

  Bro analyzer that detects Google's QUIC protocol

  JavaScript · 11 stars

• ecs-logstash-mappings

  Mapping Corelight or Zeek data to Elastic Common Schema logs

  11 stars

• top-dns

  Top DNS Measurement for Bro

  Zeek · 10 stars

• zeek-spicy-openvpn

  A Zeek OpenVPN protocol analyzer, based on Spicy.

  Zeek · 9 stars

• ecs-templates

  Corelight or Zeek Elastic Common Schema Templates

  Python · 9 stars

• ecs-dashboards

  9 stars

• zeekjs

  ZeekJS - Experimental JavaScript support for Zeek.

  C++ · 8 stars

• zeek-openvpn

  A Zeek OpenVPN protocol analyzer plugin.

  JavaScript · 7 stars

• 16 more repositories live on View on GitHub