
fail2ban
Daemon to ban hosts that cause multiple authentication errors

Daemon to ban hosts that cause multiple authentication errors

A wireshark plugin to instrument ETW

Corelight@Home script

Corelight or Zeek Elastic Common Schema Templates

Log4j Exploit Detection Logic for Zeek

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Mapping Corelight or Zeek data to Elastic Common Schema fields

A Prometheus Exporter for Suricata

Mapping Corelight or Zeek data to Elastic Common Schema logs

Add POST body excerpt to Bro's HTTP log

A Zeek OpenVPN protocol analyzer, based on Spicy.

Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation




Proof of Concept for CVE-2022-38725 against syslog-ng

Check for events that indicate non compatible devices -> CVE-2020-1472

Web-based Traffic and Cybersecurity Network Traffic Monitoring