mmguero-dev Goto Github PK

arkime

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

bento

Packer templates for building minimal Vagrant baseboxes for multiple platforms

bzar

A set of Zeek scripts to detect ATT&CK techniques.

elitewolf

OT security monitoring #nsacyber

gait

Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies

gostatic

A really small static web server for Docker

gquic_protocol_analyzer

GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor

htadmin

HTAdmin is a simple htpasswd editor to secure web content on an apache web server

icsnpp-bacnet

Zeek BACnet Parser - CISA ICSNPP

icsnpp-bsap

Zeek BSAP Parser - CISA ICSNPP

icsnpp-dnp3

Zeek DNP3 Extension Scripts - CISA ICSNPP

icsnpp-enip

Zeek Ethernet/IP and CIP Parser - CISA ICSNPP

icsnpp-ethercat

Zeek Ethercat Parser - CISA ICSNPP

icsnpp-genisys

Industrial Control Systems Network Protocol Parsers (ICSNPP) - Genisys over TCP/IP

icsnpp-modbus

Zeek Modbus Extension Scripts - CISA ICSNPP

icsnpp-opcua-binary

Zeek OPCUA Binary Parser - CISA ICSNPP

icsnpp-profinet-io-cm

Zeek Profinet I/O Context Manager Parser - CISA ICSNPP

icsnpp-s7comm

Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP

icsnpp-synchrophasor

Zeek parser for Synchrophasor Data Transfer for Power Systems (C37.118)

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

jekyll-serve

Jekyll in a Docker Container For Easy SSG Development

malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

malcolm-helm

malcolm-pcap

A set of PCAPs used to test the parsers used by Malcolm. Also, a curated list of PCAP collections I've found online.

misc-debug

miscellaneous stuff for debugging and collaboration

netbox-initializers

Plugin to load predefined data into Netbox

network-architecture-verification-and-validation

The NAVV (Network Architecture Verification and Validation) tool creates a spreadsheet for network traffic analysis from PCAP data and Zeek logs, automating Zeek analysis of PCAP files, the collation of Zeek logs and the dissection of conn.log and dns.log to create a summary or network traffic in an XLSX-formatted spreadsheet.

nginx-auth-ldap

LDAP authentication module for nginx

osd_transform_vis

OpenSearch-Dashboards plugin to create custom visualisations

packages

The default package source of the Zeek Package Manager