fastnetmon
pavel-odintsov/fastnetmonVery fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
packet-sniffing-analysisnetwork-mappingnetwork-security+5
3.7k1 month ago
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
pavel-odintsov/fastnetmonVery fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
the-tcpdump-group/tcpdumpthe TCPdump network dissector
jpcertcc/logontracerInvestigate malicious Windows logon by visualizing and analyzing Windows event log
domcyrus/rustnetPer-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
yamato-security/hayabusaMulti-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…
withsecurelabs/chainsawRapidly Search and Hunt through Windows Forensic Artefacts
cisagov/malcolmContainerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…
usarmyresearchlab/dshellDshell is a network forensic analysis framework.
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
hengyoush/kyanosKyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes…
beenuar/aisocOpen-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
tsale/edr-telemetryThis project aims to compare and evaluate the telemetry of various EDR products.
rabobank-cdc/dettectDetect Tactics, Techniques & Combat Threats
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links