
GPEWebDefender
Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.
anomaly-detectiondefensive-toolsintrusion-detection+2
2

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Fingerprint SSH clients and servers.

Zeek package for tracking long connections to report them before they have completed.

Kratos is a high-performance Windows File System Minifilter driver designed to detect, block, and permanently immunize

Sigma detection rules for AI agent security monitoring

eBPF-based Linux rootkit detector using multi-channel cross-view analysis (sched_switch, NMI, /proc) to detect DKOM, tracepoint tampering, and…

Deep Learning models for network traffic classification