1. WhodatPivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
2. YaraprocessorYara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.
5. Bro Http2Plugin for Zeek/Bro which provides http2 decoder/analyzer
8. bulkA content inspecting SMTP proxy