CVE-2024-38063
skac44/cve-2024-38063Simulates CVE-2024-38063 TCP/IP remote code execution attack, captures network traffic with TShark, and trains a machine learning model to detect…
anomaly-detectioneducationexploitation+4
skac44/cve-2024-38063Simulates CVE-2024-38063 TCP/IP remote code execution attack, captures network traffic with TShark, and trains a machine learning model to detect…
afbf4c8996f/jammer-locImplements machine and deep learning methods for indoor UWB jammer localization, including hyperparameter optimization, classification, and…
mahmoud-abbasi-svg/agent-trace-detector-evalCode, derived data and results for: Evaluating Baseline Detectors of Hijacked LLM Agents Under Rare Attacks and Distribution Shift
thingsboard/thingsboardAll-in-one IoT Platform - Device management, data collection, processing and visualization.
oisf/suricataOpen-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…
nvidia-nemo/guardrailsProgrammable guardrails for LLM chat apps: enforce input/output rails, block jailbreaks and prompt injections, detect hallucination, and mask…
blue-yonder/tsfreshAutomatic extraction of relevant features from time series:
elastic/detection-rulesDevelop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…
baidu/openraspRuntime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…
echowei/deeptrafficDeep Learning models for network traffic classification
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
benjeems/packetstriderA network packet forensics tool for SSH
vignesh07/babysharkFlows-first PCAP TUI (case files, gorgeous UX). Do do do do.
nccgroup/detectwindowscopyonwriteforapiEnumerate various traits from Windows processes as an aid to threat hunting
arthastang/iot-home-guardA tool for malicious behavior detection in IoT devices
cbuijs/sdproxyDNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.
connectedlucy/plagueDefault Detections for EDR
silverfort-open-source/latmaCollects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…