
guardd
ML-Based behavioral endpoint detection system for Linux machines

ML-Based behavioral endpoint detection system for Linux machines

A Zeek based AsyncRAT malware detector.

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

A Simple Ransomware Vaccine

A tool for malicious behavior detection in IoT devices

Small tool to play with IOCs caused by Imageload events

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Zeek package for tracking long connections to report them before they have completed.

Host IDS for desktop users

The Whale Sentinel Services


Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.

Open-source EDR for AI agents. Monitor processes, files, network, and behavior of autonomous AI agents.

A host-based IDS and network monitoring system (My graduation project)

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.


eBPF-based Linux rootkit detector using multi-channel cross-view analysis (sched_switch, NMI, /proc) to detect DKOM, tracepoint tampering, and…