Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
Automated developer-oriented status page with alerting and incident support
- golang
- go
- health
- monitor
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
kwatch runs inside your Kubernetes cluster, traces every failure to its root cause, and sends one message: what broke, why, who changed it and what to do next.
- kubernetes
- monitoring
- k8s
- kwatch
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Incident Response Forensic Framework
An open‑source technical wiki connected to the systems it describes
- confluence-alternative
- dashboard
- incident-response
- internal-documentation
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.