GitHub – mitre-attack/bzar: A set of Zeek scripts to detect ATT&CK techniques.

https://github.com/mitre-attack/bzar