SQL powered operating system instrumentation, monitoring, and analytics.
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
Cloud Native Runtime Security
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.
Respounder detects presence of responder in the network.
- responder
- golang
- network-security-monitoring
- network-security
Universal web application security sensor intended for real-time monitoring and defense.
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
A tool to catch spoofed NBNS responses.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
- ai-security
- cybersecurity
- ids
- iot-security
Local-LLM alert triage for self-hosted SOCs.
Sigma Queries turned into KQL for Defender using pysigma - Automated
- detection-engineering
- kql
- microsoftsentinel
- mitre-attack