IDS/IPS systems, network monitoring, anomaly-based detection, and threat alerting tools.
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
azure/azure-sentinelCloud-native SIEM for intelligent security analytics for your entire enterprise.
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
fail2ban/fail2banDaemon to ban hosts that cause multiple authentication errors
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
evilsocket/opensnitchInteractive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
arkime/arkimeArkime is an open source, large scale, full packet capturing, indexing, and database system.
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
olafhartong/sysmon-modularA repository of sysmon configuration modules
zoneminder/zoneminderZoneMinder is a free, open source Closed-circuit television software application developed for Linux which supports IP, USB and Analog cameras.
ossec/ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…
