Log Analysis

osquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

gravitational/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

wazuh/wazuh

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors

allinurl/goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

sigmahq/sigma

Main Sigma Rule Repository

crowdsecurity/crowdsec

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

telekom-security/tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

kubeshark/kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…

owasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

ntop/ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

olafhartong/sysmon-modular

A repository of sysmon configuration modules

ossec/ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…

clong/detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

kean/pulse

Network logger for Apple platforms