A Zeek protocol analyzer for the Facefish rootkit, based on Spicy. - View it on GitHub