
softsensor-docker-prototype
Softsensor Docker prototype

Softsensor Docker prototype

Detection of Linux Malware C2 RedXOR - demonstration


Top DNS Measurement for Bro

A Zeek based Agent Tesla malware C2 detector.

A Zeek based AsyncRAT malware detector.

A Zeek based Mitre Caldera detector.

Zeek Log Cheatsheets

A Zeek ELF File Analyzer

A Zeek based Gozi banking malware detector.

Zeek package for tracking long connections to report them before they have completed.

A Zeek based NetSupport detector. NetSupport is often abused by attackers in malware.

A Zeek OpenVPN protocol analyzer plugin.

Zeek detector for QuasarRat

Bro analyzer that detects Google's QUIC protocol

A Zeek IPSec protocol analyzer based on Spicy.

A Zeek protocol analyzer for the Facefish rootkit, based on Spicy.

A Zeek based STRRAT malware detector.