Zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
- from
- Security, CTF, Cybersecurity Blue Team, PCAPTools
- added
- 2026-10-10
- likes
- 0
similar
-
zeek2es github.com
An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek's TSV logs!
-
-
Malcolm github.com
A powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
-
Brim brimsecurity.com
Brim blends together the richness of Zeek logs with the details of packets. It's the best of both worlds. While Zeek logs can answer most all of your questions quickly, you still have fast access to packets when you need to drill down into the details. Wireshark is always just…
-
-
ZEEF/Clojure clojure.zeef.com
Security › Network > IDS / IPS / Host IDS / Host IPS: “Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.”
CTF › Networking: “An open-source network security monitor.”
Cybersecurity Blue Team › Security monitoring > Network Security Monitoring (NSM): “Powerful network analysis framework focused on security monitoring, formerly known as Bro.”
PCAPTools › Traffic Analysis/Inspection: “(formerly Bro) is an open source software platform that provides compact, high-fidelity transaction logs, file content, and fully customized output to analysts, from the smallest home office to the largest, fastest research and commercial networks. From the FAQ: "Zeek provides…”