Skip to content

@mmguero-dev mmguero-dev

All

    Repositories list

    64 repositories

    • Malcolm

      Public
      Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
      securitypcapcybersecurity
      securitypcapcybersecuritysuricatainfosecnetwork-securityzeekopensearchnetwork-traffic-analysisnetworksecurity
      Python
      •
      Other
      •456•35•0•0•Updated Oct 23, 2026Oct 23, 2026

    • Device-Type-Library-Import

      Public
      This library is intended to assist with importing device and module types into NetBox from the NetBox Community DeviceType-Library
      Python
      •
      MIT License
      •141•0•0•0•Updated Oct 23, 2026Oct 23, 2026

    • icsnpp-c1222

      Public
      Zeek ANSI C12.22 Smart Meter Protocol Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •4•0•0•0•Updated Oct 23, 2026Oct 23, 2026

    • bento

      Public
      Packer templates for building minimal Vagrant baseboxes for multiple platforms
      HCL
      •
      Apache License 2.0
      •1.1k•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • arkime

      Public
      Moloch is an open source, large scale, full packet capturing, indexing, and database system.
      C
      •
      Apache License 2.0
      •1.2k•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • icsnpp-synchrophasor

      Public
      Zeek parser for Synchrophasor Data Transfer for Power Systems (C37.118)
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •8•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • icsnpp-s7comm

      Public
      Zeek S7comm, S7comm-plus, and COTP Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •24•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • icsnpp-ge-srtp

      Public
      Zeek GE SRTP Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •6•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • icsnpp-genisys

      Public
      Industrial Control Systems Network Protocol Parsers (ICSNPP) - Genisys over TCP/IP
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Oct 22, 2026Oct 22, 2026

    • Malcolm-Test-Artifacts

      Public
      Artifacts (.pcap and .evtx files) for the Malcolm-Test project.
      Python
      •
      Apache License 2.0
      •0•1•0•0•Updated Oct 22, 2026Oct 22, 2026

    • ripple20

      Public
      A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •7•0•0•0•Updated Oct 21, 2026Oct 21, 2026

    • Malcolm-Helm

      Public
      Go Template
      •7•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-profinet-io-cm

      Public
      Zeek Profinet I/O Context Manager Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •10•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-roc-plus

      Public
      Zeek ROC Plus Parser - CISA ICSNPP
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •6•0•0•1•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-opcua-binary

      Public
      Zeek OPCUA Binary Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •17•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-omron-fins

      Public
      Zeek Omron FINS Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •6•0•0•1•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-modbus

      Public
      Zeek Modbus Extension Scripts - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-hart-ip

      Public
      Zeek HART-IP Parser - CISA ICSNPP
      Zeek
      •
      Other
      •10•0•0•1•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-enip

      Public
      Zeek Ethernet/IP and CIP Parser - CISA ICSNPP
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •21•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • icsnpp-bacnet

      Public
      Zeek BACnet Parser - CISA ICSNPP
      JavaScript
      •
      BSD 3-Clause "New" or "Revised" License
      •22•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • ja4

      Public
      JA4+ is a suite of network fingerprinting standards
      Rust
      •
      Other
      •189•0•0•0•Updated Oct 20, 2026Oct 20, 2026

    • strelka

      Public
      Real-time, container-based file scanning at enterprise scale
      Python
      •
      Other
      •146•1•0•0•Updated Oct 19, 2026Oct 19, 2026

    • Malcolm-Test

      Public
      Python
      •
      Other
      •2•0•0•0•Updated Oct 5, 2026Oct 5, 2026

    • misc-debug

      Public
      miscellaneous stuff for debugging and collaboration
      Python
      •
      MIT License
      •0•0•0•0•Updated Sep 24, 2026Sep 24, 2026

    • bzar

      Public
      A set of Zeek scripts to detect ATT&CK techniques.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •83•0•0•0•Updated Sep 22, 2026Sep 22, 2026

    • zeek-iec104

      Public
      A Zeek Parser for the IEC 104 protcol built using Spicy.
      Zeek
      •
      Other
      •12•0•0•0•Updated Sep 16, 2026Sep 16, 2026

    • htadmin

      Public
      HTAdmin is a simple htpasswd editor to secure web content on an apache web server
      PHP
      •15•0•0•0•Updated Sep 14, 2026Sep 14, 2026

    • opensearch-docker-compose

      Public
      A repository to develop and refine an OpenSearch Docker Compose
      Apache License 2.0
      •2•0•0•0•Updated Sep 3, 2026Sep 3, 2026

    • CVE-2022-26937

      Public
      A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •4•0•0•0•Updated Aug 17, 2026Aug 17, 2026

    • netbox-initializers

      Public
      Plugin to load predefined data into Netbox
      Python
      •
      Apache License 2.0
      •15•0•0•0•Updated Aug 17, 2026Aug 17, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.