Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Logging Made Easy (LME) is a no-cost and open logging and protective monitoring solution serving all organizations.

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

Open source security data pipelines.

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

This project is a SIEM with SIRP and Threat Intel, all in one.

Zeek-Formatted Threat Intelligence Feeds

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

C++ parser generator for dissecting protocols & files.

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science

Extract files from network traffic with Zeek.

Zeek IDS Dockerfile

A completely automated anomaly detector Zeek network flows files (conn.log).

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)