
fastnetmon
Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
anomaly-detectionincident-responselog-analysis+5
3.7k

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

A Zeek OSPF packet analyzer based on Spicy.

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Collects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…