Skadi
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
disk-forensicsosintmemory-forensics+9
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
matanolabs/matanoOpen source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
mrash/psadpsad: Intrusion Detection and Log Analysis with iptables
intezer/linux-explorerEasy-to-use live forensics toolbox for Linux endpoints
sap8899/reportlyAzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…
emrekybs/mrhandlerSSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…
treussart/probemanagerCentralize Management of Intrusion Detection System like Suricata Bro Ossec ...
jay123anta/laravel-threat-detectionPassive Laravel middleware that detects and logs SQL injection, XSS, RCE, bot scanners, and 175+ attack patterns. Features a built-in dashboard,…
zolderio/token-proxyA transparent PII redaction proxy for LLM API traffic. Sits between an application and an LLM provider (currently Anthropic), pseudonymizing…
guettaf-hossam/superdiagnostictoolAI-powered Windows diagnostic & auto-repair tool using Google Gemini. Detect crashes, optimize performance, scan for malware, and generate PowerShell…
signalapp/key-transparency-auditorContinuously fetches and cryptographically verifies key transparency log updates, maintains a condensed prefix and log tree view, and returns signed…
kaleth4/cve-2026-64638Technical analysis and defensive mitigation for a WordPress Core pre-auth XSS-to-RCE chain, including sanitizer bypass, DOM clobbering, JSONP abuse,…