
maltrail
Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

A network packet forensics tool for SSH

Enumerate various traits from Windows processes as an aid to threat hunting

Monitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection

Zeek package for tracking long connections to report them before they have completed.

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection

Asymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…

Sigma detection rules for AI agent security monitoring

Fingerprint SSH clients and servers.

Streamlit-based insider threat detection prototype using XGBoost and Isolation Forest to analyze employee activity data, generate risk summaries, and…

An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems.

Simulates CVE-2024-38063 TCP/IP remote code execution attack, captures network traffic with TShark, and trains a machine learning model to detect…

A python library for user-friendly forecasting and anomaly detection on time series.

Automatic extraction of relevant features from time series:

Scalable Python library for time series analysis via matrix profiles, enabling motif discovery, anomaly detection, semantic segmentation, and…