Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
47,133 repositories indexed
25–48 of 48 · Most stars
Respounder detects presence of responder in the network.
Universal web application security sensor intended for real-time monitoring and defense.
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Open Source SIEM (Security Information and Event Management system).
Botnet command & control monitor
Suricata rules for network anomaly detection
Utility that exposes the expiry of TLS certificates as Prometheus metrics
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
A CTF framework to create, build, deploy and monitor challenges
A process monitoring tool that tries to detect exploitation
Web interface to explore Suricata EVE outputs
Python API Monitor for Android apps
eBPF Security Monitoring and Sandboxing Agent Based on Aya
ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a set of Google Custom Search Engines.
Defensomania is a security monitoring and incident response card game.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Advanced Phishing Protection: Suricata rulesets open and free
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
Tom's Honey Pot as seen in Applied Network Security Monitoring.
A simple low-interaction port monitoring honeypot.
Real-time network traffic analysis in your terminal.
Real-time monitoring and visualization of failed SSH login attempts on a Linux server.
Deep network visibility, powered by Suricata. Artica integrates the Suricata IDS engine directly inside your server, giving you enterprise-grade intrusion detection without the complexity. Monitor every packet in real time, detect advanced threats, and visualize malicious