Add ASN and GeoIP information for the remote IP address directly to conn.log
-
Updated
Oct 1, 2020 - Zeek
#
zeek-script
Here are 6 public repositories matching this topic...
Multi-engine detection ruleset for the Caddy web server with 29 attack-mapped rules for Wazuh, Suricata, Snort 3, and Zeek, covering everything from path traversal to Log4Shell, with pcap-tested proof for every signature.
cybersecurity suricata xdr siem soc zeek snort wazuh snort-rules suricata-rules detection-engineering zeek-script wazuh-rules
-
Updated
Jul 3, 2026 - Zeek
Custom Zeek 8.0 IDS scripts for detecting HTTP, UDP and ICMP flood attacks, written as part of a bachelor thesis.
-
Updated
Jun 2, 2026 - Zeek
An incubator environmental monitoring and alert system built using the Zeek Network Monitoring Framework that monitors telemetry, detects abnormal conditions, and generates custom Zeek logs and alerts.
iot log-analysis pcap telemetry cybersecurity network-monitoring network-security environmental-monitoring zeek zeek-script sensor-monitoring zeek-network-monitoring
-
Updated
Aug 8, 2026 - Zeek
pre-commit hooks specification for zeek-format
-
Updated
Jan 18, 2023 - Python
Add this topic to your repo
To associate your repository with the zeek-script topic, visit your repo's landing page and select "manage topics."