# Detection Scripts

**URL:** <https://community.zeek.org/t/detection-scripts/4079>\
**Category:** Zeek\
**Created:** [March 28, 2016, 8:24pm UTC](https://community.zeek.org/t/detection-scripts/4079 "2016-03-28T20:24:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_Althouse](https://avatars.discourse-cdn.com/v4/letter/j/e9bcb4/32.png) [@John\_Althouse](https://community.zeek.org/u/John_Althouse)\
**Post date:** [March 28, 2016, 8:24pm UTC](https://community.zeek.org/t/detection-scripts/4079/1 "2016-03-28T20:24:18Z")

</div>

What are some good repos to visit to find detection scripts?

A lot of us are writing detection scripts because our jobs require us to detect all the things but we should avoid building the same thing twice in different silos if we can 😉

Here’s the ones I talked about at Bro4Pros:  
[https://github.com/darkphyber/bro](https://github.com/darkphyber/bro)

---

<div class="post-metadata">

**Author:** ![Nick\_Pratley](https://avatars.discourse-cdn.com/v4/letter/n/b77776/32.png) [@Nick\_Pratley](https://community.zeek.org/u/Nick_Pratley)\
**Post date:** [March 29, 2016, 1:26am UTC](https://community.zeek.org/t/detection-scripts/4079/2 "2016-03-29T01:26:58Z")

</div>

John, I saw the slides, looks like it was a good talk. Thanks for  
sharing the scripts.

This is probably too obvious but [https://github.com/trending/bro](https://github.com/trending/bro) has a  
good list of repos with Bro detection scripts. I think there is some  
work under way for a centralised repository:

[http://blog.bro.org/2015/12/bro-receives-200k-grant-from-mozilla.html](http://blog.bro.org/2015/12/bro-receives-200k-grant-from-mozilla.html)

Cheers,  
Nick

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:43pm UTC](https://community.zeek.org/t/detection-scripts/4079/3 "2022-05-06T15:43:32Z")

</div>


