
CorelightForSplunk
Splunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.

Splunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.

Code, derived data and results for: Evaluating Baseline Detectors of Hijacked LLM Agents Under Rare Attacks and Distribution Shift

A machine learning toolkit for log parsing [ICSE'19, DSN'16]

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…

Collection of KQL queries

WiFi, Bluetooth and Ethernet Threat Detection.

Suricata rules for network anomaly detection

A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

Monitor your local neighbourhood's bluetooth activity

OSINT - Data Visualization - Blockchain - Awareness - Scam

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

Streaming machine learning library for incremental learning on data streams, providing online estimators, drift and anomaly detection, pipelines,…

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

Algorithms for outlier, adversarial and drift detection

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

LSTM-based classifier for detecting domain generation algorithm (DGA) domains, with Keras implementations of neural network and bigram models for DNS…