maltrail
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
anomaly-detectionanti-botdefensive-tools+11
8.6k
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
antropos17/aegisOS-level monitor for AI agents: observes processes, file access, and network activity on the local machine and attributes each event to an agent…
nameles-org/namelesOpen source entropy based invalid traffic detection and pre-bid filtering.
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
tracebyte8/systraceLinux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
online-ml/riverStreaming machine learning library for incremental learning on data streams, providing online estimators, drift and anomaly detection, pipelines,…
roxanne_ardary/nexoraAI-driven endpoint governance platform that monitors software usage, applies deterministic policy-based risk classification, and generates structured…
googlecloudplatform/professional-servicesCollection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…
kreotic/sentrygridML-driven threat detection and continuous monitoring platform built for federal zero trust architectures.
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
yeasen-z/leakgaugeDetects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.
unit8co/dartsA python library for user-friendly forecasting and anomaly detection on time series.
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
gmh5225/0xguardSimple Anti-cheat library for applications that use C++ on windows. #PastedProtection
orensv/characterization-and-detection-of-cross-router-covert-channelsThis repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.