
professional-services
Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

Collection of KQL queries

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…

The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to…

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

First iteration of ML based Feedback WAF

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

A Bro package to identify connections that are bursting (lots of data and transferring quickly).

This repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to…

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be…

A tool for malicious behavior detection in IoT devices

3D multi-domain tactical intelligence map — live ships, flights, satellites, cables & space weather in the browser. Time scrubbing, scenario replay,…

Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…

Open-source IoT Platform - Device management, data collection, processing and visualization.

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support