zeek/zeek-docs

Stars
48
Rank 594,835 (Top 12 %)
Language Zeek
License
Other
Created almost 6 years ago
Updated 3 months ago

zeek/zeek-docs

zeek

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Documentation for Zeek

zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

spicy

C++ parser generator for dissecting protocols & files.

packet-bricks

A netmap-based packet layer for distributing and filtering traffic.

packages

The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.

zeek-agent

This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2

zeek-osquery

Bro/Zeek integration with osquery

zeek-docker

Docker files for building Zeek.

binpac

High level language for describing protocol parsers.

broker

Zeek's Messaging Library

bro-scripts

Misc. Bro scripts

zeek-agent-v2

Open source endpoint agent providing host information to Zeek. [v2]

zeekctl

Tool for managing Zeek deployments.

bro-plugins

(OBSOLETE) Plugins for Bro

pysubnettree

A Python Module for CIDR Lookups

cheat-sheet

The Bro/Zeek language cheat sheet

cmake

CMake scripts used in Zeek

package-manager

A package manager for Zeek

time-machine

Time-Machine Dynamic Bulk Packet Recorder

paraglob

A fairly quick data structure for matching a string against a large list of patterns.

zeek-training

Zeek Training Materials/Products

zeek-af_packet-plugin

Plugin providing native AF_Packet support for Zeek.

spicy-analyzers

Growing collection of Spicy-based protocol and file analyzers for Zeek

zeek-aux

Zeek Auxiliary Programs

trace-summary

Generates network traffic summaries.

btest

A Generic Driver for Powerful System Tests

zeek-sublime

Zeek scripting language highlighting/support for Sublime Text

zeek-netcontrol

Connectors for the Zeek NetControl framework

try-zeek

Code for try.zeek.org.

bro-live

Bro Live! A Bro training/learning environment.

zeek-agent-framework

This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2

broccoli-python

(DEPRECATED) Python bindings for Broccoli

capstats

A tool to get some NIC statistics.

spicy-ldap

zeekscript

A toolchain to parse, analyze, and format Zeek scripts

vim-zeek

Vim syntax highlighting for the Zeek scripting language (.zeek and .bro files)

broccoli

(DEPRECATED) Bro Client Communications Library

spicy-plugin

Spicy plugin for Zeek

bromagic

(OBSOLETE) Custom libmagic database for Bro

zeek-netmap

Native Netmap Packet IOSource for Zeek

bifcl

Built-In-Function (BIF) Compiler/Generator for Zeek

zeek-benchmarker

zeek-3rdparty

Third-party code used in Zeek.

zeek-client

Experimental implementation of Zeek's future cluster management client

tree-sitter-zeek

A tree-sitter grammar for the Zeek scripting language

zeek-archiver

A Zeek log archival service

zeek-demo

zeek-pkg-web

Web viewer for packages maintained by the Zeek Package Manager, e.g. https://packages.zeek.org

package-website

New version of packages website

spicy-http

Spicy-based analyzer for the HTTP protocol

broccoli-ruby

(DEPRECATED) Ruby bindings for Broccoli

zeek-testing

Test baselines for Zeek.

package-template

A Zeek package template for use with the zkg package manager

action-zkg-install

A GitHub Action for testing and installing Zeek packages

spicy-pe

Spicy-based analyzer for the Portable Executable (PE) image format

emacs-zeek-mode

An Emacs major mode for editing Zeek scripts

brogments

A Pygments lexer for Bro/Zeek scripts

zeek-package-ci

spicy-aux

Auxiliary development support for Spicy

spicy-png

Spicy-based analyzer for the PNG file format

hello-world

A "hello world" Zeek package

spicy-dhcp

Spicy-based analyzer for the DHCP protocol

spicy-zip

Spicy-based analyzer for the ZIP file format

broccoli-perl

(DEPRECATED) Perl bindings for Broccoli

spicy-dns

Spicy-based analyzer for the DNS protocol

gen-zam

A templator for the Zeek Abstract Machine

zeek-testing-cluster

External testsuite for the Zeek Cluster Controller

website

Issue tracking for zeek.org

tree-sitter-zeek-src

Generated sources for https://github.com/zeek/tree-sitter-zeek

homebrew-zeek

Homebrew tap for Zeek subprojects

spicy-tftp

Zeek package providing a Spicy-based TFTP analyzer