Strelka + Zeek + LimaCharlie
Great quick Sunday build using LimaCharlie.
It uses a Zeek (https://zeek.org/) container that extracts files from the network and automatically ingest into LimaCharlie where it gets automatically processed using Strelka (https://github.com/target/strelka).