
AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…

Runtime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…

Small tool to play with IOCs caused by Imageload events

Basic log analysis tool to detect impossible travel via IP address geographic information

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber…

Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity


NOVA - Claude Code Protection System against prompt injection attacks

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

A tool for malicious behavior detection in IoT devices


GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

A network packet forensics tool for SSH

Deep Learning models for network traffic classification

Automated cloud security auditing tool that detects AK/SK credential misuse by periodically auditing cloud platform logs using anomaly detection,…