Additional Kerberos Zeek logging; enabling policies that are not enabled by default

A JSON parser for Zeek.

pre-commit hooks specification for zeek-format

Package for generating the log schema for a given invocation of Zeek

Detection Engineering Lab Using Zeek, Elastic, and More

Terraform for Corelight's Azure Cloud Enrichment.

Terraform for Corelight's GCP Cloud Enrichment.

Convert DER files to Zeek SSL::root_certs

A machine learning application using Zeek log data for business applications

Log SMB versions

Real Intelligence Threat Analytics

zeek websocket using simple-websocket-server

Lookup hostnames via dns

Enrich the connections log with data from a CSV

Monitor Zeek from Zabbix through Telemetry Framework (Prometheus)

IP related statistics

Elasticsearch SIEM

Ansible Role to Install an zeek and suricata IDS Node

Use tcpreplay to slowly feed arbitrary pcaps to Zeek via dummy0 NIC. Impress your friends.

DEteCtion of Anomalous outbouNd HTTP TRaffic by Passive Application Fingerprinting -- fork of original scientific paper code