Pinned Repositories
configurations
dynamite-community-id
Zeek support for "community ID" flow hashing.
dynamite-nsm
DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection
elastiflow
Network flow Monitoring (Netflow, sFlow and IPFIX) with the Elastic Stack
kibana_packages
Package visualizations, dashboards, and saved searches into an installable package compatible with any Dynamite stack.
kmeans_suspicious_http_detector
This detector attempts to identify potentially suspicious HTTP traffic, and then cluster detections into related groups based on common behaviors.
publish-community_id
Add community_id to all Zeek logs that contain a UID
synesis_lite_suricata
Suricata IDS/IPS log analytics using the Elastic Stack.
utilities
zeek-utils
General purpose scripts for Zeek.
Dynamite Analytics's Repositories
DynamiteAI/dynamite-nsm
DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat detection
DynamiteAI/publish-community_id
Add community_id to all Zeek logs that contain a UID
DynamiteAI/configurations
DynamiteAI/dynamite-sdk-lite
Dynamite SDK is the companion software development kit to Dynamite NSM
DynamiteAI/elastiflow
Network flow Monitoring (Netflow, sFlow and IPFIX) with the Elastic Stack
DynamiteAI/kmeans_suspicious_http_detector
This detector attempts to identify potentially suspicious HTTP traffic, and then cluster detections into related groups based on common behaviors.
DynamiteAI/synesis_lite_suricata
Suricata IDS/IPS log analytics using the Elastic Stack.
DynamiteAI/bpf-validate
A simple command line utility for validating a PCAP filter string (BPF)
DynamiteAI/dynamite-community-id
Zeek support for "community ID" flow hashing.
DynamiteAI/kibana_packages
Package visualizations, dashboards, and saved searches into an installable package compatible with any Dynamite stack.
DynamiteAI/utilities
DynamiteAI/zeek-utils
General purpose scripts for Zeek.
DynamiteAI/dynamite-simple-agent-process-manager-plugin
Simple process manager is a very basic manager for controlling various agent components: Zeek, Suricata, and FileBeat.
DynamiteAI/dynamite_daemon_core
Common packages used by the Dynamite daemon
DynamiteAI/dynamited_pub
The NSM version of dynamited
DynamiteAI/gaussian_anomaly_detector
A collection of anomaly detectors integrated with the dynamite_analyzer_framework.
DynamiteAI/knn_anomaly_detector
knn_anomaly_detector
DynamiteAI/netbase
Netbase, short for Network Baseliner is a Zeek framework for making and recording quantitative observations about network device activity.
DynamiteAI/zeek-af_packet-plugin
Plugin providing native AF_Packet support for Zeek (formerly known as Bro).
DynamiteAI/zeek-packages
Zeek package source