Defensive Tools

blakeblackshear/frigate

NVR with realtime local object detection for IP cameras

osquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

wazuh/wazuh

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

sandboxie-plus/sandboxie

Sandboxie Plus & Classic

lolbas-project/lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

google/gvisor

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

prowler-cloud/prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.…

fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors

opennhp/opennhp

A lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…

sigmahq/sigma

Main Sigma Rule Repository

mail-in-a-box/mailinabox

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server…

oauth2-proxy/oauth2-proxy

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

justcallmekoko/esp32marauder

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

crowdsecurity/crowdsec

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…