Tools

ait-aecid/logdata-anomaly-miner

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

mouna23/ai-driven-mitre-attack

This repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM.

paul12345-cyber/multimodal-web-attack-dataset

This repository hosts a multimodal web attack dataset (MWAD) to advance AI-driven threat detection research.

orensv/characterization-and-detection-of-cross-router-covert-channels

This repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.

0warn/defender

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

yadavmukesh/log4shell-vulnerability-cve-2021-44228-

This repository provides an in-depth analysis of the Log4Shell vulnerability (CVE-2021-44228) and implements a machine learning-based approach to…

nim4/dbshield

Database firewall written in Go

endgameinc/dga_predict

LSTM-based classifier for detecting domain generation algorithm (DGA) domains, with Keras implementations of neural network and bigram models for DNS…

theflink/hunt-weird-syscalls

ETW based POC to identify direct and indirect syscalls

corelight/zeek-long-connections

Zeek package for tracking long connections to report them before they have completed.

agentshield-ai/sigma-ai

Sigma detection rules for AI agent security monitoring

theflink/hunt-weird-imageloads

Small tool to play with IOCs caused by Imageload events

d4vinci/eagleeye

A host-based IDS and network monitoring system (My graduation project)

edoardottt/offensive-onos

My experiments in weaponizing ONOS applications (https://github.com/opennetworkinglab/onos)

kennbroorg/poorskeme

OSINT - Data Visualization - Blockchain - Awareness - Scam

ait-aecid/rootkit-detection-ebpf-time-trace

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

lucadibello/network-attack-detection

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

xueboqiu/prohunter

Graph-based threat detection system using inexact graph vector matching to compare threat graphs with CTI-derived attack query graphs for automated…