
ripple20
A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

OSINT - Data Visualization - Blockchain - Awareness - Scam

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Zeek detector for QuasarRat

A Zeek based AsyncRAT malware detector.

A Zeek based Mitre Caldera detector.


Anticipator is an open-source threat detection platform for multi-agent AI systems.

Automatic extraction of relevant features from time series:

A machine learning toolkit for log-based anomaly detection [ISSRE'16]

List of tools & datasets for anomaly detection on time-series data.

Database firewall written in Go

A Simple Ransomware Vaccine


A deep learning toolkit for log-based anomaly detection

A network packet forensics tool for SSH

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.