Popular repositories

1. cp-zeek cp-zeek Public

   Analyze Zeek IDS data with ksqlDB running on Confluent Platform via Docker on your laptop. Or spin up an arbitrary number of AWS hosts, each running Confluent Platform and ksqlDB for use in an inst…

   Python 10 5

2. cp-siem cp-siem Public

   A dockerized demo for illustrating how Confluent can be used in a SIEM Modernization use case.

   Shell 8 12

3. noisemaker noisemaker Public

   Python scripts for generating noisy and suspicious network traffic.

   Python 3

4. cribl-geoipupdate cribl-geoipupdate Public

   Keep your Maxmind Database files up to date in Cribl Cloud

   Shell 3

5. ksql_for_zeek ksql_for_zeek Public

   Downloading, Installing, and Configuring Zeek IDS to send its logs to Apache Kafka for analysis with KSQL.

   Zeek 2

6. zeek-tcpreplay-kafka zeek-tcpreplay-kafka Public

   A Docker image with tcpreplay streaming a pcap to a dummy NIC, monitored by Zeek, which sends its output to Apache Kafka.

   Zeek 2 1