An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.
Repository Index
47,133 repositories indexed
1–6 of 6 · Most stars
Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
fast, extensible, versatile event router for Suricata's EVE-JSON format
- suricata
- eve
- json
- golang
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
- golang
- observability
- opentelemetry
- policy-engine
Open-source eBPF compatibility evidence and CI gate
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.