
agentic-pcap
Benchmark code and interactive results for autonomous network-attack detection by tool-using LLM agents investigating raw PCAPs.

Benchmark code and interactive results for autonomous network-attack detection by tool-using LLM agents investigating raw PCAPs.

OWASP reference project for agentic AI security evidence: correlates agent execution, identity, tool calls, and authorization decisions into…

Real-time system monitoring tool for detecting process activity and network exposure!

Cross-agent tracing and security-diagnosis system for tool-using LLM agents: normalizes trace events, builds provenance graphs, extracts…

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

Production-grade tool for detecting & remediating CVE-2026-0622 (Ghost Admin privilege escalation & master key exposure in 5G core software).

Automatic extraction of relevant features from time series:

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Scalable Python library for time series analysis via matrix profiles, enabling motif discovery, anomaly detection, semantic segmentation, and…

A python library for user-friendly forecasting and anomaly detection on time series.

Runtime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…

Small tool to play with IOCs caused by Imageload events

Basic log analysis tool to detect impossible travel via IP address geographic information

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.

In-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity
