Daemon to ban hosts that cause multiple authentication errors
Repository Index
47,133 repositories indexed
1–12 of 12 · Most stars
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Security sensor for realtime threat detection and protection
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Linux Security and Monitoring Scripts
Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities
- ebpf
- security
- linux-kernel
- linux-security-module
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
eBPF Security Monitoring and Sandboxing Agent Based on Aya