
Aegis
Your agents have access. You deserve visibility. A local security dashboard for AI coding agents: activity, sensitive files, network connections and…

Your agents have access. You deserve visibility. A local security dashboard for AI coding agents: activity, sensitive files, network connections and…

Curated catalog of Remote Monitoring and Management tools abused by threat actors, with YAML profiles, Sigma detection rules, and API access for…

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

Hands-on Wazuh SIEM/XDR home lab covering OVA deployment, agent enrollment, file integrity monitoring, VirusTotal malware detection, and MITRE ATT&CK…

Re-play Security Events

Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…

Deploy web honeypots to capture emerging attack data, analyze ModSecurity audit logs via ELK, and share threat intelligence with MISP for…

This project is a SIEM with SIRP and Threat Intel, all in one.

PowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…

OSINT intelligence on any IP, domain, or ASN


Detection and mitigation research lab for CVE-2023-23397 using network and endpoint security telemetry.

Portable forensic acquisition tool for Android devices that collects relevant data via USB debugging to identify potential spyware or compromise…

Python demo simulating CVE-2024-3094: a supply chain backdoor in XZ Utils with a trigger-based stealth activation.

A lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…

Live hunting of code injection techniques

A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM: