Python scripts for collection, and analysis of cyber threats and artifacts

Real Intelligence Threat Analytics

Repo for the talks I have given.

Bro intelligence framework utilities for Golang

Slides and stuff for my talk at flocon 2021 "Collecting Wiredata at House Hold Speeds"

Parses in Bro logs, analyses logs & graphs them into a html report

No elephant flows - flow shunting for Arista switches using EOS API

BRO IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO logs coming from a Security Onion sensor.

day 02 task

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

Bro Log Analysis

A friendly commandline tool for bro and tldr

Bro packages. Possibly unstable. I release here before anywhere else.

Proyecto de Grado realizado en la Universidad de Granada

A sample application showing how to retrieve CPTs from the BRO with the bro python package.

A saltstack formula to install ZEEK network security monitor on RHEL or Debian based systems

revDNS

A continuous integration system for testing Bro IDS