⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)

Go implementation of the Community ID flow hashing standard

Zeek TSV log reader

Sampling Profiler for Zeek

Real Intelligence Threat Analytics

A log parser for common zeek text logs in Golang.