From 903beec0effd6fc12e5654b5b195b260eb1d557d Mon Sep 17 00:00:00 2001 From: Keith Jones Date: Mon, 10 Jan 2022 18:40:58 -0500 Subject: [PATCH] Added zeek2es. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 5e589d5..44b537a 100644 --- a/README.md +++ b/README.md @@ -72,6 +72,7 @@ - [YARA](https://github.com/virustotal/yara) - The pattern matching swiss knife - [Intel Owl](https://github.com/intelowlproject/IntelOwl) - An Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file, an IP or a domain from a single API at scale. - [Capa](https://github.com/fireeye/capa) - An open-source tool to identify capabilities in executable files. +- [zeek2es](https://github.com/corelight/zeek2es) - An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek's TSV logs! #### Alerting Engine