
fastnetmon
Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
anomaly-detectionincident-responselog-analysis+5
3.7k11h 42m ago

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Collects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

A Zeek OSPF packet analyzer based on Spicy.