Awesome Lists

yaraZeekAlert

by SCILabsMX

Pythonpushed almost 3 years ago

This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a match it sends email alerts to the email address specified in the mailTo parameter on yaraAlert.conf file. The alert includes network context of the file transfer and attaches the suspicious file if it is less than 10 MB. Alerted files are copied locally to the alerted files folder.

AI summary

Alert script

Automates email alerting and file handling based on YARA rule matches from Zeek sensor data

stars
60
forks
16
watching
12
awesome list
1
View on GitHub

Embed the badge

Show how many awesome lists link to your project. The count updates automatically.

Awesome Lists badge
Markdown
[![Awesome Lists Badge](https://awesome.facts.dev/shield/SCILabsMX/yaraZeekAlert/links.svg)](https://awesome.facts.dev/awesome/SCILabsMX/yaraZeekAlert)
HTML
<a href="https://awesome.facts.dev/awesome/SCILabsMX/yaraZeekAlert"><img src="https://awesome.facts.dev/shield/SCILabsMX/yaraZeekAlert/links.svg" alt="Awesome Lists Badge" /></a>
Image URL
https://awesome.facts.dev/shield/SCILabsMX/yaraZeekAlert/links.svg

Add a GitHub project

Missing a project or an awesome list? Paste its GitHub URL and we fetch it right away.