BlockGuard
m2l33k/blockguardBlockGuard is a Windows Data Loss Prevention (DLP) agent that intercepts and controls file access at the process level. It ensures that only…
authentication-authorizationdefensive-toolsencryption-decryption-tools+4
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
m2l33k/blockguardBlockGuard is a Windows Data Loss Prevention (DLP) agent that intercepts and controls file access at the process level. It ensures that only…
arisharazakhan-cpu/dod-blue-team-network-labHigh fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…
hackinglz/gibsonNetwork monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity
corelight/corelightforsplunk
paolokappa/sharepointsecuritymonitorA comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and…
piyush20004/sentinelstream-aiSentinelStream AI: A professional SIEM and SOAR platform featuring real-time threat correlation for CVE-2024-21410 and automated incident response…
navya240/intel471-threat-hunting-cve-2023-46604My first hands-on Intel 471 threat hunting workshop experience investigating CVE-2023-46604 using Elastic SIEM, vulnerability intelligence, and…
jdormannn/secureops-labPerformed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force…
shakur1314/cve-2022-22965-spring4shell-security-operations-analysisA comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the…
17patmaks/my-sigma-rule-collectionSigma Rule for CVE-2025-49666
0warn/defenderThis is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…
garethmsheldon/cve-2025-60787-detection-motioneye-rce-via-config-injection
zedocun/pan-os-cve-2024-3400-command-injection-investigationInvestigation of a PAN-OS CVE-2024-3400 command injection attempt, analyzing payload delivery, internal processing, and execution validation based on…
oseguera12/cowrie-honeypot-digitaloceanMedium-interaction SSH/Telnet honeypot built with Cowrie, Loki, Promtail, and Grafana - provisioned on DigitalOcean via Terraform with a GitLab CI…
0tsystemspublicrepos/ifritproxyIFRIT is an AI-powered reverse proxy that intercepts incoming requests in real time, classifying each one as legitimate or malicious. Legitimate…
orgito1015/cve-2025-55182-researching-process
danieljosmariyan7254/tryhackme-solar-exploiting-log4j-Explore CVE-2021-44228, a vulnerability in log4j affecting almost all software under the sun.
corelight/zeek-endpoint-enrichment-connEnrich the conn.log with EDR data