sentrygrid
kreotic/sentrygridML-driven threat detection and continuous monitoring platform built for federal zero trust architectures.
anomaly-detectioncloud-securitydefensive-tools+3
kreotic/sentrygridML-driven threat detection and continuous monitoring platform built for federal zero trust architectures.
tracebyte8/systraceLinux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…
seldonio/alibi-detectAlgorithms for outlier, adversarial and drift detection
rob-med/awesome-ts-anomaly-detectionList of tools & datasets for anomaly detection on time-series data.
logpai/logparserA machine learning toolkit for log parsing [ICSE'19, DSN'16]
blue-yonder/tsfreshAutomatic extraction of relevant features from time series:
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
online-ml/riverStreaming machine learning library for incremental learning on data streams, providing online estimators, drift and anomaly detection, pipelines,…
stumpy-dev/stumpyScalable Python library for time series analysis via matrix profiles, enabling motif discovery, anomaly detection, semantic segmentation, and…
unit8co/dartsA python library for user-friendly forecasting and anomaly detection on time series.
yzhao062/pyodA Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, benchmark-backed ADEngine…
0x0allenace/soc-analyst-portfolioA curated portfolio showcasing my SOC investigations, threat hunting projects, DFIR labs, detection engineering, technical blogs, and cybersecurity…
xrazymee/ragsieveSelf-referenced local contrast for knowledge-poison detection in retrieval-augmented generation
elastic/detection-rulesDevelop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…
cyb3r-monk/rita-jImplementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
puniaze/portdogNetwork anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…
nccgroup/reactorRuns custom filters on Elasticsearch and alerts on matches