Log4Pot
thomaspatzke/log4potA honeypot for the Log4Shell vulnerability (CVE-2021-44228).
payload-generationvulnerability-analysisthreat-intelligence+2
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
thomaspatzke/log4potA honeypot for the Log4Shell vulnerability (CVE-2021-44228).
forensicxlab/vision-procmonA ProcessMonitor visualization application written in rust.
sleuthco/clawshield-publicSecurity proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…
emrekybs/mrhandlerSSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…
zh54321/sharepointdumperPowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…
z00nx/reversemapAnalyse SQL injection attempts in web server logs
la3ar0v/tuxresponseAutomated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.
zephrfish/ludus-defender-labMDE/MDI Defender setup for Ludus
osbornepro/btps-secpackPowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…
hybridbrothers/hunting-queries-detection-rulesThe purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
wardgate/wardgateSecurity gateway for AI agents - credential-isolated API proxying and policy-gated remote execution (conclaves). Reduce the blast radius!
blacksky-algorithms/atprotoFork of the AT Protocol reference implementation with performance-optimized AppView, Rust-based firehose indexer, Redis caching, and community…
guilherme-grimm/graph-gosimply nodes and graphs
mazx0p/threathoundAutomated threat hunting and incident response tool for Windows Event Logs with Sigma rule integration, real-time detection, and forensic artifact…
keyboardcrunch/sentinelone-attack-queriesMITRE ATT&CK mapped queries for SentinelOne Deep Visiblity
agentguard-ai/tealtigerPowerful protection for AI agents - Open-source security and cost tracking for AI applications
ait-aecid/logdata-anomaly-minerThis tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…