Quantum Insert
- quantum-insert
- python
- detection
- pcap
Repository Index
47,133 repositories indexed
49–72 of 78 · Most stars
Apache Logfile Security Analyzer
Suricata rules for network anomaly detection
- suricata-rule
- suricata
- ids
- nsm
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
The OTX Suricata Rule Generator can be used to create the rules and configuration for Suricata to alert on indicators from your OTX account.
Anvilogic Forge
- detection
- detection-engineering
- threat-hunting
- snowflake
A process monitoring tool that tries to detect exploitation
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Repo for the Open Source version of NOVA
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
eBPF Security Monitoring and Sandboxing Agent Based on Aya
Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
- detection
- splunk
- bpfdoor
- vulnerability
Intrusion Prevention System (IPS) for Secure Shell (SSH)
A tool to catch spoofed NBNS responses.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Google Summer of Code 2012 project, supported by The Honeynet Project organization.
Passive Network Audit Framework
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go
Threat Detection Rules (Snort/Sigma/Yara)
Local-LLM alert triage for self-hosted SOCs.