A set of Zeek scripts to detect ATT&CK techniques.

Zeek-Formatted Threat Intelligence Feeds

A Zeek script to generate features based on timing, volume and metadata for traffic classification.

Zeek Training Materials/Products

Bro script package to create JSON formatted logs to stream into data analysis systems.

Zeek Junk Drawer - Just some scripts and a place to put them

Log4j Exploit Detection Logic for Zeek

Enables additional JSON-logging for Zeek.

Profinet packet analyzer plugin for Zeek.

Script extending Zeek Notice framework, adding Slack notifications

Add MAC address to all Zeek Logs

Zeek Unit Testing. Provides a framework to write unit tests for Zeek scripts.

Zeek package to detect the Windows version via access to Microsoft CRLs