#Nsm

zeek

zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

arkime

arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

OISF

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

networkservicemesh

networkservicemesh

The Hybrid/Multi-cloud IP Service Mesh

jasonish

evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

FenkoHQ

dnsmonster

Passive DNS Capture and Monitoring Toolkit

travisbgreen

hunting-rules

Suricata rules for network anomaly detection

zeek

packages

The default package source of the Zeek Package Manager. Wrote a package? See the README for how to get it included.