Skip to content
@corelight

Corelight, Inc.

Corelight is the most powerful network visibility solution for information security professionals, founded by the creators of open-source Zeek.

Popular repositories Loading

  1. zeek-cheatsheets zeek-cheatsheets Public

    Zeek Log Cheatsheets

    283 45

  2. community-id-spec community-id-spec Public

    An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

    Python 170 25

  3. threat-hunting-guide threat-hunting-guide Public

    45 11

  4. raspi-corelight raspi-corelight Public

    Corelight@Home script

    Shell 40 5

  5. zeek2es zeek2es Public

    A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!

    Python 35 7

  6. ecs-mapping ecs-mapping Public

    Mapping Corelight or Zeek data to Elastic Common Schema fields

    34 15

Repositories

Showing 10 of 141 repositories
  • icannTLD Public

    Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and mark whether it's trusted or not. The source of the ICANN TLD's can be found here: https://publicsuffix.org/list/effective_tld_names.dat. The Trusted Domains list is a custom list, created by the user…

    corelight/icannTLD’s past year of commit activity
    Zeek 5 5 1 2 Updated Oct 30, 2024
  • ecs-templates Public

    Corelight or Zeek Elastic Common Schema Templates

    corelight/ecs-templates’s past year of commit activity
    Python 8 BSD-3-Clause 6 2 0 Updated Oct 29, 2024
  • ecs-mapping Public

    Mapping Corelight or Zeek data to Elastic Common Schema fields

    corelight/ecs-mapping’s past year of commit activity
    34 BSD-3-Clause 15 1 0 Updated Oct 29, 2024
  • ecs-logstash-mappings Public

    Mapping Corelight or Zeek data to Elastic Common Schema logs

    corelight/ecs-logstash-mappings’s past year of commit activity
    12 BSD-3-Clause 6 1 0 Updated Oct 29, 2024
  • go-zeek-broker-ws Public

    A Go library for using zeek broker's websocket API

    corelight/go-zeek-broker-ws’s past year of commit activity
    Go 2 BSD-3-Clause 0 2 (1 issue needs help) 0 Updated Oct 25, 2024
  • corelight-cloud Public

    IaC used to deploy Corelight Sensors into various Cloud Providers.

    corelight/corelight-cloud’s past year of commit activity
    0 MIT 0 0 1 Updated Oct 25, 2024
  • cve-2022-22954 Public
    corelight/cve-2022-22954’s past year of commit activity
    Shell 1 BSD-3-Clause 2 0 0 Updated Oct 25, 2024
  • zeekjs Public

    ZeekJS - Experimental JavaScript support for Zeek.

    corelight/zeekjs’s past year of commit activity
    C++ 9 BSD-3-Clause 4 2 1 Updated Oct 23, 2024
  • Zeek-CVE-Enrichment Public
    corelight/Zeek-CVE-Enrichment’s past year of commit activity
    Zeek 1 2 0 0 Updated Oct 21, 2024
  • terraform-azure-sensor Public

    Terraform for Corelight's Azure Cloud Sensor Deployment.

    corelight/terraform-azure-sensor’s past year of commit activity
    HCL 1 MIT 0 0 0 Updated Oct 21, 2024
View all repositories