Tools

osquery/osquery

SQL powered operating system instrumentation, monitoring, and analytics.

cyb3r-monk/rita-j

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

zeek/zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

activecm/rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

mcastens/alycon-threat-landscape

Training-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…

ntop/ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

stamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

oisf/suricata

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

dannymcc/bluehood

Monitor your local neighbourhood's bluetooth activity

skelsec/jackdaw

gather gather gather

securityclaw/securityclaw

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…

endgameinc/dga_predict

LSTM-based classifier for detecting domain generation algorithm (DGA) domains, with Keras implementations of neural network and bigram models for DNS…

cbuijs/sdproxy

DNS Proxy that is simple and fast with not so simple features. Focused on routed DNS forwarding, filtering and parental control.

jamalrfordii-arch/vanguard-map

3D multi-domain tactical intelligence map — live ships, flights, satellites, cables & space weather in the browser. Time scrubbing, scenario replay,…

neur0map/polymaster

Monitor large transactions on Polymarket and Kalshi prediction markets with anomaly detection

camp0/aiengine

Programmable packet inspection engine with NIDS, DNS classification, frequency analysis, and auto-regex generation. Supports Python/Ruby/Java/Lua…

nccgroup/impossibletravelloganalysis

Basic log analysis tool to detect impossible travel via IP address geographic information

qruiqai/leakish

Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser.