
goaccess
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…

Runtime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.


A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber…


Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

NOVA - Claude Code Protection System against prompt injection attacks

Deep Learning models for network traffic classification

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk

Automated cloud security auditing tool that detects AK/SK credential misuse by periodically auditing cloud platform logs using anomaly detection,…

Small tool to play with IOCs caused by Imageload events

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

A network packet forensics tool for SSH

Basic log analysis tool to detect impossible travel via IP address geographic information