
packetStrider
A network packet forensics tool for SSH

A network packet forensics tool for SSH

A tool for malicious behavior detection in IoT devices

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

Small tool to play with IOCs caused by Imageload events

Automated cloud security auditing tool that detects AK/SK credential misuse by periodically auditing cloud platform logs using anomaly detection,…

Basic log analysis tool to detect impossible travel via IP address geographic information

Runtime security gateway for AI agents: cryptographically attests tool calls, enforces policies, sandboxes execution, and logs tamper-evident audit…

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber…

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation.…


Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.

NOVA - Claude Code Protection System against prompt injection attacks


PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

Lightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk