Explore @SCILabsMX Open Source projects

SCILabs (@SCILabsMX)

SCILabsMX

Stars
58
Global Org. Rank 73,573 (Top 24 %)
Registered over 6 years ago
Most used languages

Python
100.0 %
Location 🇲🇽 Mexico
Country Total Rank 740
Country Ranking

Python
73

yaraZeekAlert

This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a match it sends email alerts to the email address specified in the mailTo parameter on yaraAlert.conf file. The alert includes network context of the file transfer and attaches the suspicious file if it is less than 10 MB. Alerted files are copied locally to the alerted files folder.