Zeek Python Packages

tenzir

Tenzir is the data pipeline engine for security teams.

bat

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

pyvast

Tenzir is the data pipeline engine for security teams.

zat

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

loghunter-cli

Local-first, transparent threat hunting for the logs you already have: Zeek, Pi-hole, syslog, CloudTrail. Names the technique behind every finding. No SIEM, no agent, no black box.

threatbus

The missing link to connect open-source threat intelligence tools.

dynamite-nsm

DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection

threatbus-misp

A plugin to enable threatbus communication with MISP.

threatbus-zeek

A plugin to enable threatbus communication with Zeek network monitor.

threatbus-inmem

A simplistic in-memory backbone for threatbus.

autozeekwatch

An online, deployable machine learning network intrusion detection system for Zeek.

threatbus-cif3

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-rabbitmq

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

suricata-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

pytenzir

Tenzir is the data pipeline engine for security teams.

pyvast-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

stix-shifter-threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-zmq-app

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

threatbus-zmq

A plugin to connect apps via ZeroMQ.

vast-threatbus

Connect the open source telemetry engine VAST with Threat Bus, the open source threat intelligence dissemination layer

threatbus-vast

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

pyzeek

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark

broutils

Zeek Analysis Tools (ZAT): Processing and analysis of Zeek network data with Pandas, scikit-learn, Kafka and Spark