Pinned Loading

1. zeek/zeek zeek/zeek Public

   Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

   C++ 7.9k 1.4k

2. matchylabs/matchy matchylabs/matchy Public

   Fast IoC matching: scan logs for threat intel (IPs, domains, hashes).

   Rust 15 1

3. matchylabs/zeek-matchy-plugin matchylabs/zeek-matchy-plugin Public

   High-performance IP and pattern matching for Zeek using memory-mapped databases. 7M+ queries/sec, shared memory across workers, hot-reloadable, no libmaxminddb dependency.

   Zeek 4 1

4. matchylabs/matchy-wireshark-plugin matchylabs/matchy-wireshark-plugin Public

   Wireshark plugin for real-time threat intelligence matching

   Rust 3