Zeek Python Packages

tenzir

Tenzir CLI bindings and binary launchers

bat

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

zat

Zeek Analysis Tools

pyvast

A security telemetry engine for detection and response

threatbus

The missing link to connect open-source threat intelligence tools.

threatbus-zeek

A plugin to enable threatbus communication with Zeek network monitor.

threatbus-inmem

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-misp

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

dynamite-nsm

DynamiteNSM is a lightweight, versatile network security monitor designed to make securing your network environment simple and intuitive.

threatbus-cif3

A plugin to enable indicators to be submitted to CIFv3 in real-time

threatbus-rabbitmq

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

autozeekwatch

An online, deployable machine learning network intrusion detection system for Zeek.

pytenzir

A security telemetry engine for detection and response

threatbus-zmq-app

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

stix-shifter-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-zmq

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

pyvast-threatbus

Connect the open source telemetry engine VAST with Threat Bus, the open source threat intelligence dissemination layer

suricata-threatbus

A simple ZMQ app to connect to Threat Bus and ingest indicators as Suricata rules via `suricatasc`

vast-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-vast

A plugin to enable threatbus communication with VAST.

pyzeek

Zeek Analysis Tools

broutils

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark