Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

The missing link between spreadsheets and data visualization

The default package source of the Zeek Package Manager

A Spicy protocol analyzer for WireGuard

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Proof of concept communications from C# via a web browser process

How to Zeek Sysmon Logs!

Generic Signature Format for SIEM Systems

Small and highly portable detection tests based on MITRE's ATT&CK.

Malwoverview.py is a first response tool to perform an initial and quick triage on either a directory containing malware samples or a specific malware sample.

Bro integration with osquery

Yara rule making tool (IDA Plugin)

(extensible) Data Exfiltration Toolkit (DET)

An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills.

Suricata RPMs for CentOS/EL

.exe which makes a few simple SSL calls

Mirror of the official OISF Suricata git repository

Collection of Remote Administration Tool samples

vawtrak traffic decoder

TCP/IP packet demultiplexer