sparrow-wifi
ghostop14/sparrow-wifiNext-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
osintreconnaissancewi-fi-auditing+5
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
ghostop14/sparrow-wifiNext-Gen GUI-based WiFi and Bluetooth Analyzer for Linux
reprise99/sentinel-queriesCurated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…
digitalruby/ipbanAutomated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…
cocoadebug/cocoadebugiOS Debugging Tool 🚀
ericzimmerman/kapefilesThis repository serves as a place for community created Targets and Modules for use with KAPE.
paulsec/awesome-windows-domain-hardeningA curated list of awesome Security Hardening techniques for Windows.
tirrenotechnologies/tirrenoOpen-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
otrf/ossemCommunity-driven project for documenting, standardizing, and modeling security event logs to improve detection analytics and data normalization…
neo23x0/auditdBest Practice Auditd Configuration
betterdb-inc/monitorReal-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.
trustedsec/sysmoncommunityguideTrustedSec Sysinternals Sysmon Community Guide
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
kunai-project/kunaieBPF-based Linux security monitor and threat hunter providing chronologically ordered, container-aware events with on-host correlation for incident…
jonrau1/electriceyeElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…
cyb3rmik3/kql-threat-hunting-queriesA repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.