joidiego/detection-struts-cve-2017-5638-detectorReal-time anomaly detection system for Apache Struts CVE-2017-5638 exploit using streaming analytics, 3-gram byte analysis, and Count-Min Sketch.…
skac44/cve-2024-38063Simulates CVE-2024-38063 TCP/IP remote code execution attack, captures network traffic with TShark, and trains a machine learning model to detect…
itzmeshervin/siem-dashboardA lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…
shoucheng3/graylog2__graylog2-server_cve-2023-41044_5-1-2Open source log management platform for centralized log aggregation, real-time analysis, and security event monitoring with customizable dashboards…
yadavmukesh/log4shell-vulnerability-cve-2021-44228-This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to…
devinblack001/ddos-reduction-systemAdaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…
protectai/rebuffMulti-layered prompt injection detector for AI applications using heuristics, LLM-based analysis, vectorDB attack signatures, and canary token leak…
salesforce/merlionEnd-to-end Python framework for time series intelligence, offering anomaly detection, forecasting, change point detection, AutoML, ensembles, and…
salesforce/hasshHASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be…
fusion1110/ebpf-hid_guardLinux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…
mandiant/silketwC# wrapper for ETW that serializes kernel and user-mode event data to JSON for threat hunting, malware analysis, and incident response, with Yara…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
beenuar/aisocOpen-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…
reprise99/sentinel-queriesCollection of KQL queries
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
nfstream/nfstreamNFStream: a Flexible Network Data Analysis Framework.
logpai/logparserA machine learning toolkit for log parsing [ICSE'19, DSN'16]
