#1IDS/IPS systems, network monitoring, anomaly-based detection, and threat alerting tools.
Kitploit recommended
thinkst/opencanaryLow-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…
elastic/protections-artifactsElastic Security detection content for Endpoint
kismetwireless/kismetGithub mirror of official Kismet repository
yeti-platform/yetiYour Everyday Threat Intelligence
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
inverse-inc/packetfencePacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…
beenuar/aisocSelf-hostable AI SOC that fuses security alerts, auto-triages via agentic AI, runs MITRE ATT&CK investigations, and logs every agent decision in a…
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
snort3/snort3Multi-threaded network intrusion detection and prevention system with rule-based detection, protocol-aware inspection, and pcap analysis for…
sans-blue-team/deepbluecliPowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…
hslatman/awesome-industrial-control-system-securityA curated list of resources related to Industrial Control System (ICS) security.
neo23x0/lokiIOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…
foxio-llc/ja4JA4+ is a suite of network fingerprinting standards
beelzebub-labs/beelzebubA secure low code deception runtime framework, leveraging AI for System Virtualization.
altramayor/gatekeeperThe first open-source DDoS protection system
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…
nzymeorg/nzymeWiFi, Bluetooth and Ethernet Threat Detection.
baidu/openraspRuntime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…
