Skip to content

@mmguero-dev mmguero-dev

Change the repository type filter

All

    Repositories list

    62 repositories

    • Malcolm

      Public
      Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
      securitypcapcybersecurity
      securitypcapcybersecuritysuricatainfosecnetwork-securityzeekopensearchnetwork-traffic-analysisnetworksecurity
      Python
      •
      Other
      •438•34•0•0•Updated Aug 18, 2026Aug 18, 2026

    • Device-Type-Library-Import

      Public
      This library is intended to assist with importing device and module types into NetBox from the NetBox Community DeviceType-Library
      Python
      •
      MIT License
      •139•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • bzar

      Public
      A set of Zeek scripts to detect ATT&CK techniques.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •84•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • CVE-2022-26937

      Public
      A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •4•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • netbox-initializers

      Public
      Plugin to load predefined data into Netbox
      Python
      •
      Apache License 2.0
      •15•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • ja4

      Public
      JA4+ is a suite of network fingerprinting standards
      Rust
      •
      Other
      •184•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • icsnpp-modbus

      Public
      Zeek Modbus Extension Scripts - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Aug 11, 2026Aug 11, 2026

    • icsnpp-ge-srtp

      Public
      Zeek GE SRTP Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •6•0•0•0•Updated Aug 11, 2026Aug 11, 2026

    • icsnpp-enip

      Public
      Zeek Ethernet/IP and CIP Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •18•0•0•0•Updated Aug 11, 2026Aug 11, 2026

    • icsnpp-dnp3

      Public
      Zeek DNP3 Extension Scripts - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •13•0•0•0•Updated Aug 11, 2026Aug 11, 2026

    • arkime

      Public
      Moloch is an open source, large scale, full packet capturing, indexing, and database system.
      C
      •
      Apache License 2.0
      •1.2k•0•0•0•Updated Aug 4, 2026Aug 4, 2026

    • jekyll-serve

      Public
      Jekyll in a Docker Container For Easy SSG Development
      Dockerfile
      •
      MIT License
      •119•0•0•0•Updated Aug 4, 2026Aug 4, 2026

    • goStatic

      Public
      A really small static web server for Docker
      Go
      •
      GNU General Public License v2.0
      •77•0•0•0•Updated Aug 4, 2026Aug 4, 2026

    • Malcolm-Helm

      Public
      Go Template
      •7•0•0•0•Updated Aug 3, 2026Aug 3, 2026

    • bento

      Public
      Packer templates for building minimal Vagrant baseboxes for multiple platforms
      HCL
      •
      Apache License 2.0
      •1.1k•0•0•0•Updated Jul 22, 2026Jul 22, 2026

    • strelka

      Public
      Real-time, container-based file scanning at enterprise scale
      Python
      •
      Other
      •142•1•0•0•Updated Jul 21, 2026Jul 21, 2026

    • Malcolm-Test

      Public
      Python
      •
      Other
      •2•0•0•0•Updated Jul 21, 2026Jul 21, 2026

    • icsnpp-opcua-binary

      Public
      Zeek OPCUA Binary Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •15•0•0•0•Updated Jul 16, 2026Jul 16, 2026

    • icsnpp-profinet-io-cm

      Public
      Zeek Profinet I/O Context Manager Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •9•0•0•0•Updated Jul 16, 2026Jul 16, 2026

    • icsnpp-omron-fins

      Public
      Zeek Omron FINS Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •5•0•0•0•Updated Jul 16, 2026Jul 16, 2026

    • icsnpp-hart-ip

      Public
      Zeek HART-IP Parser - CISA ICSNPP
      Zeek
      •
      Other
      •9•0•0•0•Updated Jul 16, 2026Jul 16, 2026

    • icsnpp-s7comm

      Public
      Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •20•0•0•0•Updated Jul 13, 2026Jul 13, 2026

    • icsnpp-genisys

      Public
      Industrial Control Systems Network Protocol Parsers (ICSNPP) - Genisys over TCP/IP
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Jul 13, 2026Jul 13, 2026

    • icsnpp-ethercat

      Public
      Zeek Ethercat Parser - CISA ICSNPP
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Jul 13, 2026Jul 13, 2026

    • icsnpp-bsap

      Public
      Zeek BSAP Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •13•0•0•0•Updated Jul 13, 2026Jul 13, 2026

    • icsnpp-bacnet

      Public
      Zeek BACnet Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •18•0•0•0•Updated Jul 13, 2026Jul 13, 2026

    • Malcolm-Test-Artifacts

      Public
      Artifacts (.pcap and .evtx files) for the Malcolm-Test project.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Jul 6, 2026Jul 6, 2026

    • misc-debug

      Public
      miscellaneous stuff for debugging and collaboration
      Python
      •
      MIT License
      •0•0•0•0•Updated Jun 23, 2026Jun 23, 2026

    • zeek-fuzzy-hashing

      Public
      Zeek plugin providing fuzzy hashing integration.
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •4•0•0•0•Updated May 22, 2026May 22, 2026

    • icsnpp-c1222

      Public
      Zeek ANSI C12.22 Smart Meter Protocol Parser - CISA ICSNPP
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •3•0•0•0•Updated May 18, 2026May 18, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.