EagleEye
d4vinci/eagleeyeA host-based IDS and network monitoring system (My graduation project)
anomaly-detectiondefensive-toolseducation+5
27
d4vinci/eagleeyeA host-based IDS and network monitoring system (My graduation project)
ny1024/clawguardModular security toolkit for autonomous agents providing static analysis, configuration auditing, runtime monitoring, and supply chain verification…
c0oki3s/veilgateAsymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-consistent…
uky007/petriagePETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.
lucadibello/network-attack-detectionAdvanced detection of port scanning, DoS and malware attacks using Machine Learning techniques
qruiqai/leakishBrowser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser.
dereeqw/berrysentinelBerry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…
mrcord77/beacon-hunterDetects phi-structured C2 beacons that evade RITA and standard regularity-based detectors
xueboqiu/prohunterGraph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…
corelight/dashboards-splunk-dns-hunting-beaconingDNS Dashboard for hunting and identifying beaconing
corelight/conn-burstA Bro package to identify connections that are bursting (lots of data and transferring quickly).
mukendi/kratosminifilterKratos is a high-performance Windows File System Minifilter driver designed to detect, block, and permanently immunize
all3xj/fixing-google-secops-detectionsTuning and refactoring Google Chronicle Curated Detections to eliminate alert fatigue and fix logic gaps/bugs.
yingtaoren/d-scanAnalyzes LLM internal states and 100+ attention/probability features to train classifiers that detect document poisoning attacks in RAG systems.
mouna23/ai-driven-mitre-attackThis repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM.
nsol-nmsu/fml-networkFLNET2023 is a dataset designed for intrusion detection in Federated Learning scenarios. It's built using the CORE emulator, simulating a realistic…
corelight/hasshFingerprint SSH clients and servers.
jepsen-io/duckdbJepsen-based transactional correctness testing framework for DuckDB, detecting isolation anomalies like G2-item and SSI violations via randomized…