
monitor
Real-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.

Real-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Benchmark suite and code for detecting AI alignment failures, with 44 benchmarks across ten failure types and a zero-shot RLCD detector evaluated on…

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

DNS Dashboard for hunting and identifying beaconing

Reference implementation for "Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution". Out-of-band Epistemic Andon Cord,…

AI-driven endpoint governance platform that monitors software usage, applies deterministic policy-based risk classification, and generates structured…

Autoencoder-based anomaly detection for identifying phishing domains using CERT Polska warning list data, with Jupyter notebooks for research and…

Splunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.

A machine learning toolkit for log parsing [ICSE'19, DSN'16]

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

Linux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…

Collection of KQL queries

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

A python library for user-friendly forecasting and anomaly detection on time series.

Scalable Python library for time series analysis via matrix profiles, enabling motif discovery, anomaly detection, semantic segmentation, and…

WiFi, Bluetooth and Ethernet Threat Detection.

Suricata rules for network anomaly detection