ELK stack with docker-compose

Real Intelligence Threat Analytics

Parses in Bro logs, analyses logs & graphs them into a html report

Bro intelligence framework utilities for Golang

Modified version of scan.bro to add destination IP sampling

Trickbot Webinar

Bro packages. Possibly unstable. I release here before anywhere else.

DEteCtion of Anomalous outbouNd HTTP TRaffic by Passive Application Fingerprinting -- fork of original scientific paper code

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

Zeek TSV log reader

BRO IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO logs coming from a Security Onion sensor.

day 02 task

Proyecto de Grado realizado en la Universidad de Granada

revDNS

Log DHCP networks seen assigned by DHCP servers

My NSMBW Levels

Python scripts for collection, and analysis of cyber threats and artifacts

Slides and stuff for my talk at flocon 2021 "Collecting Wiredata at House Hold Speeds"