
zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
anomaly-detectionanti-botdefensive-tools+14

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

Malcom - Malware Communications Analyzer

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

Lua plugin to extract data from Wireshark and convert it into MISP format

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

Bro plugin to check if certificates are affected by CVE-2017-15361