Archived
teler
teler-sh/telerReal-time HTTP Intrusion Detection
defensive-toolsthreat-intelligenceintrusion-detection+2
3.1k
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
cisagov/redeyeRedEye is a visual analytic tool supporting Red & Blue Team operations
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
cisagov/malcolmContainerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links
digitalruby/ipbanAutomated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…
mozilla/mozdefDEPRECATED - MozDef: Mozilla Enterprise Defense Platform
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
tsale/edr-telemetryThis project aims to compare and evaluate the telemetry of various EDR products.
neo23x0/auditdBest Practice Auditd Configuration
maliceio/maliceVirusTotal Wanna Be - Now with 100% more Hipster
beenuar/aisocOpen-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…
paulsec/awesome-windows-domain-hardeningA curated list of awesome Security Hardening techniques for Windows.
reprise99/sentinel-queriesCurated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…