Lists (17)
Starred repositories
11
stars
written in Bro
Clear filter
A set of Zeek scripts to detect ATT&CK techniques.
GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor
A Zeek script to generate features based on timing, volume and metadata for traffic classification.
Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt
A Zeek package that detects Zoom logins and meeting joins
Reference implementation for brute-force attack detection in end-to-end encrypted network traffic