Ranked by Attention Score: stars gained over the last 30 complete days
21 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Daemon to ban hosts that cause multiple authentication errors
Main Sigma Rule Repository
SQL powered operating system instrumentation, monitoring, and analytics.
Cloud Native Runtime Security
eBPF-based Security Observability and Runtime Enforcement
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Malicious traffic detection system
Linux Runtime Security and Forensics using eBPF
Rapidly Search and Hunt through Windows Forensic Artefacts
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
Security sensor for realtime threat detection and protection
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
The repository host gives no description.
🔥Open source RASP solution
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management