Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.

BROSTAR simplifies the datamanegement of the Basis Registratie Ondergrond (BRO)

Zeek's Messaging Library

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

A package manager for Zeek

Zeek TSV log reader

My NSMBW Levels

Go implementation of the Community ID flow hashing standard

A python package that is able to communicate with the REST API of the BRO (BasisRegistratie Ondergrond).

This is a simple ai made by us

OWAMP protocol analyzer plugin for Bro/Zeek

Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files

Bro - A super fast stylesheet language for cool kids! Alternative to SassC, DartSass SassJS and Less.

An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

Splunk configs for Security Onion

A sample application showing how to retrieve CPTs from the BRO with the bro python package.

day 02 task