Skip to content

@corelight Corelight, Inc.

Change the repository type filter

All

    Repositories list

    144 repositories

    • CorelightForSecOps

      Public
      Chronicle parser for CORELIGHT and related information.
      Python
      •4•4•0•0•Updated Apr 3, 2025Apr 3, 2025

    • corelight-client

      Public
      Corelight Sensor API command-line client
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •5•17•3•2•Updated Apr 2, 2025Apr 2, 2025

    • CorelightForMSSentinel

      Public
      MS Sentinel Dashboards, Parsers, and Documentation
      0•1•0•1•Updated Apr 2, 2025Apr 2, 2025

    • zeekjs

      Public
      ZeekJS - Experimental JavaScript support for Zeek.
      nodejsjavascriptv8zeek
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •5•8•2•1•Updated Mar 31, 2025Mar 31, 2025

    • LLM-Ninja

      Public
      Scripts to help you use LLM AI models like a ninja.
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •0•2•0•0•Updated Mar 20, 2025Mar 20, 2025

    • zeek-caldera-detector

      Public
      A Zeek based Mitre Caldera detector.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •0•0•0•0•Updated Mar 11, 2025Mar 11, 2025

    • zeek-quasarrat-detector

      Public
      Zeek detector for QuasarRat
      Shell
      •
      BSD 3-Clause "New" or "Revised" License
      •0•2•0•0•Updated Mar 11, 2025Mar 11, 2025

    • zeek-netsupport-detector

      Public
      A Zeek based NetSupport detector. NetSupport is often abused by attackers in malware.
      Shell
      •
      BSD 3-Clause "New" or "Revised" License
      •1•1•0•0•Updated Mar 11, 2025Mar 11, 2025

    • terraform-azure-sensor

      Public
      Terraform for Corelight's Azure Cloud Sensor Deployment.
      cloudazureterraformsensorzeek
      HCL
      •
      MIT License
      •1•2•0•0•Updated Feb 28, 2025Feb 28, 2025

    • Zeek-Endpoint-Enrichment

      Public
      Zeek
      •
      Other
      •1•2•0•1•Updated Feb 26, 2025Feb 26, 2025

    • ecs-templates

      Public
      Corelight or Zeek Elastic Common Schema Templates
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •6•8•2•0•Updated Feb 25, 2025Feb 25, 2025

    • ecs-logstash-mappings

      Public
      Mapping Corelight or Zeek data to Elastic Common Schema logs
      BSD 3-Clause "New" or "Revised" License
      •6•12•1•0•Updated Feb 5, 2025Feb 5, 2025

    • ecs-mapping

      Public
      Mapping Corelight or Zeek data to Elastic Common Schema fields
      BSD 3-Clause "New" or "Revised" License
      •15•34•1•0•Updated Feb 5, 2025Feb 5, 2025

    • zeek-long-connections

      Public
      Zeek package for tracking long connections to report them before they have completed.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •23•30•3•0•Updated Jan 30, 2025Jan 30, 2025

    • zeek-spicy-wireguard

      Public
      A Zeek Wireguard protocol analyzer based on Spicy.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •3•6•0•0•Updated Jan 24, 2025Jan 24, 2025

    • zeek-spicy-ipsec

      Public
      A Zeek IPSec protocol analyzer based on Spicy.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •7•8•0•0•Updated Jan 24, 2025Jan 24, 2025

    • zeek-spicy-openvpn

      Public
      A Zeek OpenVPN protocol analyzer, based on Spicy.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •3•9•1•0•Updated Jan 24, 2025Jan 24, 2025

    • block-corelight-chronicle

      Public
      Looker Dashboards for Chronicle
      LookML
      •
      MIT License
      •5•1•0•0•Updated Jan 15, 2025Jan 15, 2025

    • go-zeek-broker-ws

      Public
      A Go library for using zeek broker's websocket API
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •0•5•2•0•Updated Jan 14, 2025Jan 14, 2025

    • zeek-spicy-ospf

      Public
      A Zeek OSPF packet analyzer based on Spicy.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •3•8•0•0•Updated Jan 8, 2025Jan 8, 2025

    • detect-ransomware-filenames

      Public
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •10•16•0•0•Updated Dec 20, 2024Dec 20, 2024

    • icannTLD

      Public
      Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and mark whether it's trusted or not. The source of the ICANN TLD's can be found here: https://publicsuffix.org/list/effective_tld_names.dat. The Trusted Domains list is a custom list, created by the user…
      Zeek
      •
      Other
      •5•6•0•0•Updated Nov 14, 2024Nov 14, 2024

    • ExtendIntel

      Public
      This package extends the Intel package to log more fields
      Zeek
      •
      Other
      •0•2•0•0•Updated Nov 11, 2024Nov 11, 2024

    • Zeek-Endpoint-Enrichment-conn

      Public
      Enrich the conn.log with EDR data
      Zeek
      •
      Other
      •0•1•0•0•Updated Nov 7, 2024Nov 7, 2024

    • Zeek-Endpoint-Enrichment-all

      Public
      Zeek
      •
      Other
      •0•1•0•0•Updated Nov 7, 2024Nov 7, 2024

    • terraform-gcp-enrichment

      Public
      Terraform for Corelight's GCP Cloud Enrichment.
      cloudenrichmentterraformgcpzeek
      HCL
      •
      MIT License
      •0•0•0•0•Updated Nov 6, 2024Nov 6, 2024

    • terraform-gcp-sensor

      Public
      Terraform for Corelight's GCP Cloud Sensor Deployment.
      cloudterraformsensorgcpzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Nov 6, 2024Nov 6, 2024

    • terraform-azure-enrichment

      Public
      Terraform for Corelight's Azure Cloud Enrichment.
      cloudenrichmentazureterraformzeek
      HCL
      •
      MIT License
      •0•0•0•0•Updated Nov 6, 2024Nov 6, 2024

    • terraform-aws-enrichment

      Public
      Terraform for Corelight's AWS Cloud Enrichment.
      awscloudenrichmentterraformzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Nov 6, 2024Nov 6, 2024

    • terraform-aws-sensor

      Public
      Terraform for Corelight's AWS Cloud Sensor Deployment.
      awscloudterraformsensorzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Nov 6, 2024Nov 6, 2024