ntopng
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
packet-sniffing-analysisnetwork-mappingnetwork-security+4
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
azure/azure-sentinelCloud-native SIEM for intelligent security analytics for your entire enterprise.
usarmyresearchlab/dshellDshell is a network forensic analysis framework.
hengyoush/kyanosKyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes…
ossec/ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
domcyrus/rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
cocoadebug/cocoadebugiOS Debugging Tool 🚀
pavel-odintsov/fastnetmonVery fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
withsecurelabs/chainsawRapidly Search and Hunt through Windows Forensic Artefacts
yamato-security/hayabusaMulti-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…
the-tcpdump-group/tcpdumpthe TCPdump network dissector
jpcertcc/logontracerInvestigate malicious Windows logon by visualizing and analyzing Windows event log
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
security-onion-solutions/security-onionSecurity Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
olafhartong/sysmon-modularA repository of sysmon configuration modules
