theflakes Goto Github PK

bro

Bro is a powerful network analysis framework that is much different from the typical IDS you may know. Official mirror of git.bro.org/bro.git .

bro-large_uploads

bro-long-connections

Bro package for tracking long connections to report them before they have completed.

bro-react

react stuff

bro-scripts

Various Bro scripts

bro-scripts-1

Bro-IDS scripts

bro-scripts-2

Collection of bro scripts

bro_agent

Bro Intel/Notice Log Agent for Sguil

bro_scripts

A collection of bro_scripts and signatures

crits

CRITs - Collaborative Research Into Threats

crits_services

CRITs Services Collection

cs-bro

Bro scripts written by CrowdStrike Services

duo_log_grabber

Grabs the administrator and authentication logs from the Duo Security API and sends CEF-formatted syslog.

elsa

enumerator

Linux Enumeration Script

evil_dll

Simple DLL to test various injection methods.

exploitpack

Exploit Pack - Project

fmd

Windows file metadata / forensic tool.

fsf

File Scanning Framework

howto-elastic_scroll_api

Example how to use the Elastic Scroll API to pull back more than the default max of 10k logs.

ingather

iterm2-color-schemes

Over 230 terminal color schemes/themes for iTerm/iTerm2. Includes ports to Terminal, Konsole, PuTTY, Xresources, XRDB, Remmina, Termite, XFCE, Tilda, FreeBSD VT, Terminator, Kitty, MobaXterm, LXTerminal, Microsoft's Windows Terminal, Visual Studio, Alacritty

jve

Cmd line utility that accepts json via standard in (piping) and extracts values from json fields.

kansa

A Powershell incident response framework

linux_forensic_harvester

Harvest Linux forensic data for operational triage of an event.

lnk-rs

A Rust library for parsing and writing MS Shell Links (shortcuts, *.lnk)

log_sieve

External elastic / opensearch log alerting tool

mal-dnssearch

Compare multiple log formats against malware reputation lists.

mimetype

Get MimeType of Windows file.

os-defaults_research

Information pertaining to OS install defaults to baseline normal for a given OS.