#1Behavioral anomaly detection, outlier analysis, UEBA, and statistical threat detection tools.
Kitploit recommended
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
antropos17/aegisDesktop monitoring and local security reviews for AI agents, with opt-in policy-controlled execution and MCP action tools. Windows primary;…
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
roxanne_ardary/nexoraAI-driven endpoint governance platform that monitors software usage, applies deterministic policy-based risk classification, and generates structured…
devinblack001/ddos-reduction-systemAdaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…
neo23x0/lokiIOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…
cbuijs/sdproxyDNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.
bplinux/chackdDaemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696
francescopace/espectreESPectre - Motion detection system based on Wi-Fi spectre analysis (CSI), with Home Assistant integration.
orensv/characterization-and-detection-of-cross-router-covert-channelsThis repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.
pushkarreddyy/radioguardZero-Trust Cellular Defense Sub-Service for Android (IMSI-Catcher, 2G SMS Blaster, and 4G aLTEr Detection & Safe Routing)
tracebyte8/systraceLinux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…
thingsboard/thingsboardAll-in-one IoT Platform - Device management, data collection, processing and visualization.
