Daemon to ban hosts that cause multiple authentication errors
Repository Index
47,133 repositories indexed
1–15 of 15 · Most stars
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Security sensor for realtime threat detection and protection
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
A process monitoring tool that tries to detect exploitation
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
A tool to catch spoofed NBNS responses.