Zeek Analysis Tools (ZAT) 
The ZAT Python package supports the processing and analysis of Zeek data with Pandas, scikit-learn, and Spark
Recent Improvements (Fall 2019):
- Renamed to Zeek Analysis Tools :)
- Better Docs (https://supercowpowers.github.io/zat/)
- Faster/Smaller Pandas Dataframes for large log files: Large Dataframes
- Better Panda Dataframe to Matrix (ndarray) support: Dataframe To Matrix
- Scalable conversion from Zeek logs to Parquet: Zeek to Parquet
- Vastly improved Spark Dataframe Class: Zeek to Spark
- Updated/improved Notebooks: Analysis Notebooks
BroCon 2017 Presentation
Data Analysis, Machine Learning, Bro, and You! (Video)
Why ZAT?
Zeek already has a flexible, powerful scripting language why should I use ZAT?
Offloading: Running complex tasks like statistics, state machines, machine learning, etc.. should be offloaded from Zeek so that Zeek can focus on the efficient processing of high volume network traffic.
Data Analysis: We have a large set of support classes that help bridge from raw Zeek data to packages like Pandas, scikit-learn, and Spark. We also have example notebooks that show step-by-step how to get from here to there.
Getting Started
Analysis Notebooks
- Zeek to Scikit-Learn
- Zeek to Parquet
- Zeek to Spark
- Spark Clustering
- Zeek to Kafka
- Zeek to Kafka to Spark
- Clustering: Picking K (or not)
- Anomaly Detection Exploration
- Risky Domains Stats and Deployment
- Zeek to Matplotlib
Install
$ pip install zat
Documentation
https://supercowpowers.github.io/zat/
About SuperCowPowers
The company was formed so that its developers could follow their passion for Python, streaming data pipelines and having fun with data analysis. We also think cows are cool and should be superheros or at least carry around rayguns and burner phones. Visit SuperCowPowers
1 maintainer
Metadata
1 maintainer
Release files for pyzeek 0.3.9
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| pyzeek-0.3.9.tar.gz | 148.0 kB | Without provenance | Details for pyzeek-0.3.9.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| pyzeek-0.3.9-py2.py3-none-any.whl | Python 3, Python 2 | none | any | Details for pyzeek-0.3.9-py2.py3-none-any.whl |
Total release size: 355.3 kB
Release files / pyzeek-0.3.9.tar.gz
| Download URL | pyzeek-0.3.9.tar.gz |
|---|---|
| Size | 148.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
42798e38cced82ef0f7c4dc24926634b2832e16ec88eefede739a8bebedf020a
|
|
BLAKE2b-256 checksum How to use checksums |
83da160fe10b62e967f109d6230d78b48b9b24195e9a7956e9bd5cd214694a56
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.5.0.1 requests/2.24.0 setuptools/49.2.0 requests-toolbelt/0.9.1 tqdm/4.47.0 CPython/3.7.4
|
Release files / pyzeek-0.3.9-py2.py3-none-any.whl
| Download URL | pyzeek-0.3.9-py2.py3-none-any.whl |
|---|---|
| Size | 207.3 kB |
| Tags | Python 2 Python 3 |
|
SHA-256 checksum How to use checksums |
a14cefc920f466db1db2b99c762b7fec924614d84e40920b42cf631a2b7248a6
|
|
BLAKE2b-256 checksum How to use checksums |
709c03aa3f12343b4a62bc2a751e5c772560e9bc2167fecf3bd2e6c8f342fe86
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.5.0.1 requests/2.24.0 setuptools/49.2.0 requests-toolbelt/0.9.1 tqdm/4.47.0 CPython/3.7.4
|
Security for pyzeek 0.3.9
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
