
Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…
anomaly-detectiondefensive-toolsdns-analysis+6
675

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

A Bro package to identify connections that are bursting (lots of data and transferring quickly).

Zeek package for tracking long connections to report them before they have completed.

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Host IDS for desktop users