
Archived
c2finder
Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
intrusion-detectionioc-managementlog-analysis+3
5

Centralize or distribute IPset blacklists

Detects CVE-2020-16898: "Bad Neighbor"

Zeek package to detect exploitation attempts of CVE-2017-2741 targeting HP JetDirect printers via network traffic analysis.