1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+2,287 stars
from 13,190 · score 7.74
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
7 repositories by Attention Score · May 10, 2026 – Nov 5, 2026 (UTC)
2.stamparm / maltrail
Malicious traffic detection system
+277 stars
from 8,378 · score 5.63
3.OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
- hunting
- dfir
- +3 more
+180 stars
from 4,527 · score 5.20
+100 stars
from 2,081 · score 4.62
5.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+60 stars
from 931 · score 4.11
6.jasonish / docker-suricata
A Suricata Docker image.
+18 stars
from 320 · score 2.94
7.bad-antics / nullsec-logreaper
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
- c
- forensics
- log-analysis
- security
- high-performance
- nullsec
- +5 more
+4 stars
from 79 · score 1.61