latma
silverfort-open-source/latmaCollects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…
anomaly-detectioncloud-securityincident-response+5
80
silverfort-open-source/latmaCollects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…
neur0map/polymasterMonitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection
ostesayed/oste-web-log-analyzerOSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.
corelight/ripple20A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.
mattijsmoens/intentshieldPre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.
lucadibello/network-attack-detectionAdvanced detection of port scanning, DoS and malware attacks using Machine Learning techniques
qruiqai/leakishBrowser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser.
corelight/zeek-spicy-ospfA Zeek OSPF packet analyzer based on Spicy.
yingtaoren/d-scanAnalyzes LLM internal states and 100+ attention/probability features to train classifiers that detect document poisoning attacks in RAG systems.
corelight/hasshFingerprint SSH clients and servers.
mahdi13830510/cve-2026-31431-mitigation-suiteKernel-runtime defense framework for AF_ALG vulnerabilities, featuring eBPF socket tracing, Ansible hardening, and a crypto auditor for drift…
bplinux/chackdDaemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696
theretardedelon/gpewebdefenderLightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.
ziad-hsn/cpraCPRA is a high-performance infrastructure monitoring system designed for platform teams managing large-scale microservice architectures. Built on…
xrazymee/ragsieveSelf-referenced local contrast for knowledge-poison detection in retrieval-augmented generation
corelight/corelightforsplunkSplunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.
siddharth2440/network-detection-engineLightweight network intrusion detection engine capturing live traffic with libpcap. Detects SYN/ICMP floods, port scans, and signature-based web…
aman-sharma-dev/netsentryxAn event-driven network monitoring platform that performs live packet capture (Npcap), low-latency traffic analytics, and unsupervised threat…