Packages
By esnet
Prometheus exporter for Zeek performance data
By precurse
Checks for HTTP anomalies typically used for attacking.
By justinazoff
A broctl plugin that enables jemalloc profiling
By corelight
This package provides some basic analysis for JPEG files.
By dopheide
This script expands the base known-hosts policy to include reverse DNS queries and syncs it across all workers.
By corelight
This package provides some basic analysis for Mach-o files.
By dopheide
This script enables easy customation of how notice actions are handled. It's built to work with eZeekConfigurator, but that isn't required.
By pgaulon
Bro Notices through Slack webhook
By dopheide
This script just replaces the old ntp-monlist script to work with Zeek 3.0.0+
By amzn
Plugin that enables parsing of the BACnet standard building controls protocol
By amzn
Plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards
By ukncsc
Plugin that enables parsing of the IKEv2 protocol
By amzn
Plugin that enables parsing of the Profinet protocol
By 0xxon
Identify certificates potentially affected by CVE-2017-15361
By amzn
Plugin that enables parsing of the S7 protocol
By amzn
Plugin that enables parsing of the Tabular Data Stream (TDS) protocol
By 0xxon
A PostgreSQL reader and writer for Bro.
By jsiwek
Gathers and prints field descriptions for all Zeek logs.
The default output format is CSV files.
By cybera
Sniffpass will alert on cleartext passwords discovered in HTTP POST requests
Page 6 of 7, showing 20 record(s) out of 125 total