Packages
By activecm
Find and log open, long-lived connections into a "conn_long" log.
By corelight
A Zeek OpenVPN Protocol Analyzer
By corelight
Detects the Google QUIC (GQUIC) protocol and adds "gquic"
to conn.log's "service" field.
By corelight
A Facefish rootkit detector, based on Spicy.
By corelight
An IPSec Zeek protocol analyzer based on Spicy.
By corelight
A Zeek OpenVPN protocol analyzer, based on Spicy.
By corelight
A Zeek OSPF packet analyzer, based on Spicy.
By corelight
A Zeek STUN protocol analyzer based on Spicy.
By corelight
A Wireguard VPN protocol analyzer, based on Spicy.
By corelight
A plugin to find Windows executables that have been XOR encoded.
By corelight
Detects Zerologon (CVE-2020-1472) attempts and exploits.
Page 3 of 3, showing 12 record(s) out of 52 total