Top 11 bro open source projects

Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.

A list of your various social statii.

BRO/Zeek IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO/Zeek logs coming from a remote sensor.

Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files

An extremely crude, lightweight Web Frontend for Suricata/Bro to be used with BriarIDS

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!

Bro IDS + ELK Stack to detect and block data exfiltration

Documentation for Zeek

Useful resources for Zeek(https://zeek.org/) (Bro(http://bro.org/))