zeek good first issues (C++)

Vector with `UINT32_MAX` index causes out-of-bounds heap write 17 days ago

Good First Issue Area: Scripting

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

WebSocket analyzer: Support RFC-7692 per-message compression 25 days ago

Good First Issue Area: Protocol Analysis

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

HTTP/1.x: Content-Encoding: br (Brotli) is not decoded about 2 months ago

Good First Issue

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Add tests that exercise all of the error cases in the expression handling 2 months ago

Good First Issue Area: CI/Testing

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Add btests that cover all of the file signatures 2 months ago

Good First Issue Priority: Low Area: CI/Testing Implementation: Scripts

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Add a DHCPv6 analyzer 2 months ago

Good First Issue Area: Protocol Analysis

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Improve NTPv4 extension parsing and introduce dedicated extension event 3 months ago

Good First Issue

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

LDAP: Forward authentication data to NTLM, GSS-API, Kerberos 3 months ago

Good First Issue Complexity: Modest Area: Protocol Analysis

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Built-in spicy analyzers don't contain debug instrumentation, even if Zeek is built in debug mode 3 months ago

Good First Issue Area: Build/Platform Area: Spicy

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Missing Detection: FTP login-only sessions (USER/PASS/QUIT) absent from ftp.log 3 months ago

Good First Issue

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Missing Detection: NTP Mode 6 and Mode 7 (monlist) administrative commands silently dropped 3 months ago

Good First Issue Area: Protocol Analysis

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

is_valid_base64() utility function 6 months ago

Good First Issue Area: Scripting

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Replace UTF code 8 months ago

Good First Issue Complexity: Modest Area: Event Engine

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Add start offset for `find_first`/`find_last` BIFs 9 months ago

Good First Issue Priority: Low Area: Scripting Complexity: Trivial

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

Bypassing Zeek's file extraction processor by twisting Content-Type 9 months ago

Good First Issue Area: File Analysis Area: Protocol Analysis

zeek/zeek

7.7K

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

C++

#bro#dfir#ndr#network-monitoring#nsm#pcap#security#zeek

zeek/zeek

Open Issues Need Help