
CorelightForSplunk
Splunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.

Splunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.

A Zeek OSPF packet analyzer based on Spicy.

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

Network anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…

Open source entropy based invalid traffic detection and pre-bid filtering.

DNS Dashboard for hunting and identifying beaconing

A Bro package to identify connections that are bursting (lots of data and transferring quickly).

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Lightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…

Zeek detector for QuasarRat

A Zeek based Mitre Caldera detector.

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Detect HTTP stalling attacks like slowloris with Bro

Zeek detection for CVE-2020-16898-"Bad Neighbor"

Web-based Traffic and Cybersecurity Network Traffic Monitoring

ZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.

Canarytokens helps track activity and actions on your network

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…