
Hunt-Weird-ImageLoads
Small tool to play with IOCs caused by Imageload events

Small tool to play with IOCs caused by Imageload events

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

DGA-generated domain detection using deep learning models

A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

Detect HTTP stalling attacks like slowloris with Bro

My experiments in weaponizing ONOS applications (https://github.com/opennetworkinglab/onos)

Host IDS for desktop users

Framework for implementing Network Intrusion Detection Systems (NIDS) aimed at identifying anomalies in network flows using Federated Learning models.

Basic log analysis tool to detect impossible travel via IP address geographic information

Multivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…

A Zeek OSPF packet analyzer based on Spicy.


Security & Compliance bodyguard for OpenClaw agents

Detects LLM context-leakage attacks by training lightweight behavior probes on log-probabilities, with vLLM offline/server detection pipelines.

Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696

Detection for SUNBURST C2 Stage-1 using Shannon Entropy

This repository hosts a multimodal web attack dataset (MWAD) to advance AI-driven threat detection research.