Log Analysis

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

ntop/ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

betterdb-inc/monitor

Real-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.

azure/azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors

crowdsecurity/crowdsec

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

tenzir/tenzir

Collect, parse, normalize, aggregate, store, query, and route security telemetry data at scale using pipeline-based dataflows for threat detection…

agentguard-ai/tealtiger

Powerful protection for AI agents - Open-source security and cost tracking for AI applications

allinurl/goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

lore-hex/quill-router

TrustedRouter.com repo for secure LLM proxying

osquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

guettaf-hossam/superdiagnostictool

AI-powered Windows diagnostic & auto-repair tool using Google Gemini. Detect crashes, optimize performance, scan for malware, and generate PowerShell…

cisco-ai-defense/defenseclaw

Security Governance for Agentic AI

hashicorp-forge/grove

A Software as a Service (SaaS) log collection framework.

byteray-labs/query-hub

CQL Hub is an open repository of detection and hunting queries for CrowdStrike NextGen SIEM and Falcon LogScale. All queries stored here are…

dougburks/so-crates

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

jay123anta/laravel-threat-detection

Passive Laravel middleware that detects and logs SQL injection, XSS, RCE, bot scanners, and 175+ attack patterns. Features a built-in dashboard,…