iMonitorSDK
wecooperate/imonitorsdkThe world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能，…
configuration-auditingdefensive-toolsforensics+5
379
wecooperate/imonitorsdkThe world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能，…
inverse-inc/packetfenceOpen-source network access control (NAC) system with captive portal, 802.1X, BYOD management, wired/wireless enforcement, and IDS/vulnerability…
pfsense/pfsenseFreeBSD-based network firewall distribution with web configuration interface, offering enterprise-grade packet filtering, VPN, and extensible…
mcastens/alycon-threat-landscapeTraining-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…
halildeniz/dnswatchDNS traffic sniffer and analyzer for monitoring, filtering, and detecting anomalies in DNS queries. Features include PCAP export, DoH support, and a…
armadito/armadito-avOpen-source antivirus core library, daemon, and service providing malware detection and real-time system protection for Linux desktops and servers.
atlantsecurity/atlant-hardenAtlantHarden - free Windows, browser & Office security hardening. 579 settings incl. 354 DISA STIG controls (Win11/Edge/Chrome/Firefox/Office 365) +…
limo57640-crypto/nginx-rift-detectorFree NGINX Rift CVE-2026-42945 detector for version, rewrite config, ASLR, crash logs, and exploitation indicators.
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
osbornepro/btps-secpackPowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…
kubearmor/kubearmorRuntime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF,…
gmh5225/awesome-game-securityCurated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…
liske/needrestartSystem utility that identifies and restarts daemons using outdated libraries after package upgrades to maintain security. Supports containers and…
graphenex/graphenexAutomated framework for system hardening via modular commands. Secures Linux/Windows by reducing attack surface through firewall, user, network,…
otrf/set-auditruleUseful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
ghaziwali/huliosA Rust-based transparent Tor proxy that routes all system traffic through the Tor network enhanced security, proper DNS isolation, and modern Linux…
anvilsecure/dawgmondawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software