Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
翻译 - 真实情报威胁分析
Bro IDS Dockerfile
A lightweight tool to score network traffic and flag anomalies
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
brostash: Linux distribution based on Debian and focusing on network security events collection
An Ubuntu 16.04 build containing Suricata, PulledPork, Bro, and Splunk
Materials for the BSides NoVA/Charleston 2018 Bro Workshop
Docker based Zeek IDS worker cluster
Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
Integration of Bro-IDS and ELK stack