maltrail
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
anomaly-detectionanti-botdefensive-tools+11
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
nameles-org/namelesOpen source entropy based invalid traffic detection and pre-bid filtering.
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
yeasen-z/leakgaugeDetects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
stumpy-dev/stumpyScalable Python library for time series analysis via matrix profiles, enabling motif discovery, anomaly detection, semantic segmentation, and…
rob-med/awesome-ts-anomaly-detectionList of tools & datasets for anomaly detection on time-series data.
yzhao062/pyodA Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, benchmark-backed ADEngine…
yjesus/patriot-linuxHost IDS for desktop users
nfstream/nfstreamNFStream: a Flexible Network Data Analysis Framework.
alperenugurlu/network_assessmentWith Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
allinurl/goaccessGoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
corelight/http-stalling-detectorDetect HTTP stalling attacks like slowloris with Bro
betterdb-inc/monitorReal-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.