SQL powered operating system instrumentation, monitoring, and analytics.
Repository Index
47,133 repositories indexed
1–24 of 70 · Most stars
Daemon to ban hosts that cause multiple authentication errors
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Main Sigma Rule Repository
Cloud Native Runtime Security
Malicious traffic detection system
eBPF-based Security Observability and Runtime Enforcement
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
- hids
- security
- pci-dss
- nist800-53
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
Linux Runtime Security and Forensics using eBPF
The Hunting ELK
- hunting
- elasticsearch
- kibana
- logstash
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
🔥Open source RASP solution
The repository host gives no description.
- threat-detection
- threat-hunting
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Security sensor for realtime threat detection and protection
The repository host gives no description.
Sysmon for Linux
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
Splunk Security Content
- splunk
- detection
- engineering
- responses
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Elastic Security detection content for Endpoint