OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
Repository Index
47,133 repositories indexed
1–10 of 10 · Most stars
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
- libtomcrypt
- cryptography
- c
- encryption
ebpfkit is a rootkit powered by eBPF
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
A library of cryptographic primitives (ciphers, hashes, etc) for OCaml
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit