intentshield
mattijsmoens/intentshieldPre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.
ai-securityanomaly-detectioncode-analysis+9
20
mattijsmoens/intentshieldPre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.
yzhao062/pyodA Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, benchmark-backed ADEngine…
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
dannymcc/bluehoodMonitor your local neighbourhood's bluetooth activity
ait-aecid/logdata-anomaly-minerThis tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…
0x0allenace/soc-analyst-portfolioA curated portfolio showcasing my SOC investigations, threat hunting projects, DFIR labs, detection engineering, technical blogs, and cybersecurity…
xrazymee/ragsieveSelf-referenced local contrast for knowledge-poison detection in retrieval-augmented generation
nfstream/nfstreamNFStream: a Flexible Network Data Analysis Framework.
securityclaw/securityclawA modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…
nate-ryan-7690/home_soc_suiteA personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…
reyjesusq/sentinel-mcpAutonomous AI-powered cyber defense system using MCP, Gemini 2.0 Flash, Dynatrace observability and MongoDB. Google Cloud Hackathon submission.
dtrizna/quasarnixReverse Shell Detection with Machine Learning
lightless-labs/third-thoughtsResearch toolkit for analyzing AI agent behavioral patterns through multi-disciplinary corpus analysis. Parses session logs, runs 23 analytical…
jenderal92/ddos-traffic-monitorA real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.
jazbengu/threatdetectStreamlit-based insider threat detection prototype using XGBoost and Isolation Forest to analyze employee activity data, generate risk summaries, and…
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
owasp/intrusion-alert-educational-network-ids