Skip to content
@corelight

Corelight, Inc.

Corelight is the most powerful network visibility solution for information security professionals, founded by the creators of open-source Zeek.

Popular repositories Loading

  1. zeek-cheatsheets zeek-cheatsheets Public

    Zeek Log Cheatsheets

    313 47

  2. community-id-spec community-id-spec Public

    An open standard for hashing network flows into identifiers, a.k.a "Community IDs".

    Python 198 26

  3. threat-hunting-guide threat-hunting-guide Public

    61 13

  4. raspi-corelight raspi-corelight Public

    Corelight@Home script

    Shell 45 5

  5. zeek2es zeek2es Public

    A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further processing!

    Python 41 8

  6. zeek-community-id zeek-community-id Public

    Zeek support for Community ID flow hashing.

    Zeek 37 18

Repositories

Showing 10 of 156 repositories
  • zeek-log-writer-nats Public

    A Zeek log writer implementation for the NATS.io Connective Technology JetStream persistence system.

    corelight/zeek-log-writer-nats's past year of commit activity
    Zeek 1 BSD-3-Clause 3 0 3 Updated Oct 22, 2026
  • emudhra-weak-keys Public

    A Zeek package that detects when compromised eMudhra intermediate certificates are used in TLS 1.2 and below.

    corelight/emudhra-weak-keys's past year of commit activity
    Zeek 0 BSD-3-Clause 0 0 0 Updated Oct 22, 2026
  • CorelightForSentinelOne Public

    Corelight Dashboards and Parsers for Sentinel One Singularity

    corelight/CorelightForSentinelOne's past year of commit activity
    7 0 0 1 Updated Oct 22, 2026
  • ecs-templates Public

    Corelight or Zeek Elastic Common Schema Templates

    corelight/ecs-templates's past year of commit activity
    Python 11 BSD-3-Clause 9 1 2 Updated Oct 22, 2026
  • ecs-mapping Public

    Mapping Corelight or Zeek data to Elastic Common Schema fields

    corelight/ecs-mapping's past year of commit activity
    35 BSD-3-Clause 16 1 0 Updated Oct 22, 2026
  • CorelightForSecOps Public

    Chronicle parser for CORELIGHT and related information.

    corelight/CorelightForSecOps's past year of commit activity
    Python 5 4 0 1 Updated Oct 22, 2026
  • corelight-client Public

    Corelight Sensor API command-line client

    corelight/corelight-client's past year of commit activity
    Python 18 BSD-3-Clause 6 2 1 Updated Oct 21, 2026
  • php2shell-detect Public

    Zeek and Suricata Detections for "php2shell" CVE-2026-109618 and CVE-2026-109619

    corelight/php2shell-detect's past year of commit activity
    Zeek 5 BSD-3-Clause 3 0 0 Updated Oct 21, 2026
  • quipu Public

    A desktop workbench for writing, validating, compiling, and testing YARA rules.

    corelight/quipu's past year of commit activity
    Rust 1 BSD-3-Clause 1 0 0 Updated Oct 20, 2026
  • suricata_exporter Public

    A Prometheus Exporter for Suricata

    corelight/suricata_exporter's past year of commit activity
    Go 27 BSD-3-Clause 15 1 1 Updated Oct 18, 2026
View all repositories

Top languages

Loading…