1.wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
- cybersecurity
- file-integrity-monitoring
- +14 more
Ranked by Attention Score: stars gained over the last 180 complete days
10 repositories by Attention Score · May 10, 2026 – Nov 5, 2026 (UTC)
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Daemon to ban hosts that cause multiple authentication errors
Main Sigma Rule Repository
SQL powered operating system instrumentation, monitoring, and analytics.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Security sensor for realtime threat detection and protection
Elastic Security detection content for Endpoint
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.