Skip to content

@corelight Corelight, Inc.

All

    Repositories list

    154 repositories

    • quipu

      Public
      A desktop workbench for writing, validating, compiling, and testing YARA rules.
      rusttypescriptyara
      rusttypescriptyarasecurity-toolstauriyara-x
      Rust
      •
      BSD 3-Clause "New" or "Revised" License
      •1•1•0•0•Updated Oct 18, 2026Oct 18, 2026

    • terraform

      Public
      IaC used to deploy Corelight Sensors into various Cloud Providers.
      awscloudazure
      awscloudazureterraformtemplatesgcpiac
      HCL
      •
      MIT License
      •0•0•0•2•Updated Oct 16, 2026Oct 16, 2026

    • ecs-logstash-mappings

      Public
      Mapping Corelight or Zeek data to Elastic Common Schema logs
      BSD 3-Clause "New" or "Revised" License
      •8•12•2•0•Updated Oct 15, 2026Oct 15, 2026

    • ecs-templates

      Public
      Corelight or Zeek Elastic Common Schema Templates
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •9•11•1•2•Updated Oct 15, 2026Oct 15, 2026

    • cve-2021-44228

      Public
      Log4j Exploit Detection Logic for Zeek
      zeekcve-2021-44228
      zeekcve-2021-44228
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •9•19•10•1•Updated Oct 13, 2026Oct 13, 2026

    • CorelightForSecOps

      Public
      Chronicle parser for CORELIGHT and related information.
      Python
      •4•5•0•1•Updated Oct 13, 2026Oct 13, 2026

    • corelight-client

      Public
      Corelight Sensor API command-line client
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •6•18•2•1•Updated Oct 5, 2026Oct 5, 2026

    • ecs-mapping

      Public
      Mapping Corelight or Zeek data to Elastic Common Schema fields
      BSD 3-Clause "New" or "Revised" License
      •16•35•1•1•Updated Oct 1, 2026Oct 1, 2026

    • go-zeek-broker-ws

      Public
      A Go library for using zeek broker's websocket API
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •1•5•2•0•Updated Sep 17, 2026Sep 17, 2026

    • suricata_exporter

      Public
      A Prometheus Exporter for Suricata
      prometheusprometheus-exportersuricata
      prometheusprometheus-exportersuricata
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •15•27•2•1•Updated Aug 27, 2026Aug 27, 2026

    • packet_replay

      Public
      Send pcaps via GENEVE or VXLAN tunnels
      Python
      •1•0•0•0•Updated Aug 25, 2026Aug 25, 2026

    • ecs-dashboards

      Public
      4•9•2•0•Updated Aug 11, 2026Aug 11, 2026

    • zeek-mercury-npf

      Public
      Zeek
      •
      Other
      •0•0•0•0•Updated Jul 28, 2026Jul 28, 2026

    • CVE-2022-26937

      Public
      A Zeek package to detect CVE-2022-26937, a vulnerability in the Network Lock Manager (NLM) protocol in Windows NFS server.
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •4•7•1•1•Updated Jul 23, 2026Jul 23, 2026

    • zeek-log-writer-nats

      Public
      A Zeek log writer implementation for the NATS.io Connective Technology JetStream persistence system.
      securityloggingnats
      securityloggingnatszeeknats-jetstreamzeek-plugin
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •3•1•0•3•Updated Jul 23, 2026Jul 23, 2026

    • zeekjs

      Public
      ZeekJS - Experimental JavaScript support for Zeek.
      nodejsjavascriptv8
      nodejsjavascriptv8zeek
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •8•9•2•1•Updated Jul 10, 2026Jul 10, 2026

    • corelight-cloud

      Public archive
      IaC used to deploy Corelight Sensors into various Cloud Providers.
      awscloudazure
      awscloudazureterraformtemplatesgcpiac
      HCL
      •
      MIT License
      •2•2•0•1•Updated Jul 1, 2026Jul 1, 2026

    • terraform-azure-sensor

      Public archive
      Terraform for Corelight's Azure Cloud Sensor Deployment.
      cloudazureterraform
      cloudazureterraformsensorzeek
      HCL
      •
      MIT License
      •2•2•1•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-azure-enrichment

      Public archive
      Terraform for Corelight's Azure Cloud Enrichment.
      cloudenrichmentazure
      cloudenrichmentazureterraformzeek
      HCL
      •
      MIT License
      •0•0•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-gcp-enrichment

      Public archive
      Terraform for Corelight's GCP Cloud Enrichment.
      cloudenrichmentterraform
      cloudenrichmentterraformgcpzeek
      HCL
      •
      MIT License
      •2•0•2•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-config-fleet

      Public archive
      Terraform for Corelight's Fleet Manager Configuration.
      cloudterraformconfiguration
      cloudterraformconfigurationfleetzeek
      HCL
      •
      MIT License
      •0•0•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-aws-fleet

      Public archive
      Terraform for Corelight Fleet Deployment.
      awscloudterraform
      awscloudterraformiacfleet
      HCL
      •
      MIT License
      •0•0•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-config-sensor

      Public archive
      Terraform for Corelight's Sensor Configuration.
      cloudterraformsensor
      cloudterraformsensorconfigurationzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-aws-enrichment

      Public archive
      Terraform for Corelight's AWS Cloud Enrichment.
      awscloudenrichment
      awscloudenrichmentterraformzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-gcp-sensor

      Public archive
      Terraform for Corelight's GCP Cloud Sensor Deployment.
      cloudterraformsensor
      cloudterraformsensorgcpzeek
      HCL
      •
      MIT License
      •0•1•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-aws-single-sensor

      Public archive
      Terraform for a single AWS Corelight EC2 instance Cloud Sensor Deployment.
      awscloudterraform
      awscloudterraformiac
      HCL
      •
      MIT License
      •0•1•0•0•Updated Jul 1, 2026Jul 1, 2026

    • terraform-aws-sensor

      Public archive
      Terraform for Corelight's AWS Cloud Sensor Deployment.
      awscloudterraform
      awscloudterraformsensorzeek
      HCL
      •
      MIT License
      •5•4•0•0•Updated Jul 1, 2026Jul 1, 2026

    • Zeek-Endpoint-Enrichment

      Public
      Zeek
      •
      Other
      •1•4•0•0•Updated Jun 30, 2026Jun 30, 2026

    • ExtendIntel

      Public
      This package extends the Intel package to log more fields
      Zeek
      •
      Other
      •0•3•0•0•Updated Jun 30, 2026Jun 30, 2026

    • ip-distance

      Public
      Compute Metcalf's IP distance metric and accompanying blog
      Zeek
      •
      BSD 3-Clause "New" or "Revised" License
      •0•0•0•0•Updated Jun 12, 2026Jun 12, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.