Repo for the talks I have given.

Real Intelligence Threat Analytics

A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, tedious tasks slowing them down. #nsacyber

Bro Log Analysis

Bro intelligence framework utilities for Golang

Slides and stuff for my talk at flocon 2021 "Collecting Wiredata at House Hold Speeds"

A python package that is able to communicate with the REST API of the BRO (BasisRegistratie Ondergrond).

A continuous integration system for testing Bro IDS

Python scripts for collection, and analysis of cyber threats and artifacts

revDNS

A saltstack formula to install ZEEK network security monitor on RHEL or Debian based systems

BRO IDS content pack contains pipeline rules, a stream, a dashboard displaying interesting activity, and a syslog tcp input to capture and index BRO logs coming from a Security Onion sensor.

Proyecto de Grado realizado en la Universidad de Granada

A sample application showing how to retrieve CPTs from the BRO with the bro python package.

day 02 task

A friendly commandline tool for bro and tldr

Bro packages. Possibly unstable. I release here before anywhere else.

Parses in Bro logs, analyses logs & graphs them into a html report