ELK stack with docker-compose

Real Intelligence Threat Analytics

Bro intelligence framework utilities for Golang

Modified version of scan.bro to add destination IP sampling

Trickbot Webinar

Parses in Bro logs, analyses logs & graphs them into a html report

BRO IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO logs coming from a Security Onion sensor.

day 02 task

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

DEteCtion of Anomalous outbouNd HTTP TRaffic by Passive Application Fingerprinting -- fork of original scientific paper code

Bro packages. Possibly unstable. I release here before anywhere else.

Proyecto de Grado realizado en la Universidad de Granada

Zeek TSV log reader

revDNS

My NSMBW Levels

Log DHCP networks seen assigned by DHCP servers

Python scripts for collection, and analysis of cyber threats and artifacts

Slides and stuff for my talk at flocon 2021 "Collecting Wiredata at House Hold Speeds"