
dawgmon
dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software

dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software

Deploy web honeypots to capture emerging attack data, analyze ModSecurity audit logs via ELK, and share threat intelligence with MISP for…

Real-time HTTP Intrusion Detection

DNS traffic sniffer and analyzer for monitoring, filtering, and detecting anomalies in DNS queries. Features include PCAP export, DoH support, and a…

Interactive data visualization tool for blue teams to analyze detection data, understand relationships, reduce alert fatigue, and improve incident…

Analyze Windows Firewall outbound blocks and selectively allow traffic

Analyzes Nginx access logs to detect SQL injection, scanner tools, webshells, and exploitation attempts, aiding system administrators in server…

Set of tools to analyze Windows sandboxes for exposed attack surface.