
LogsTotal
Self-hosted multi-engine Sigma detection for event logs

Self-hosted multi-engine Sigma detection for event logs

Hunt WiFi threats silently. Catch the hackers.

Real-time system monitoring tool for detecting process activity and network exposure!

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

Scripts to triage compromised systems (Linux, ESXi, FreeBSD/NetScaler)

Self-contained SSH honeypot for capturing attacker interactions and turning them into structured security intelligence.

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Detects exposure to CVE-2026-31431 (Copy Fail) and optionally mitigates by disabling the vulnerable algif_aead kernel module, providing verdicts and…

Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

Detect and mitigate CVE-2026-31431 (Copy Fail) on Linux systems.

Archived, moved to codesource/cve-check. Shell script to detect CVE-2026-31431 (Copy Fail) exposure and mitigations on Linux systems: kernel check,…

Defensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK…

PowerShell-based backdoor detection tool for VMware Horizon connection servers, targeting CVE-2021-44228. Includes canary with optional submission…

Detection script for CVE-2026-31431 (Copy Fail) that checks kernel version, patch presence, kernel configs, AF_ALG socket availability, setuid…

Detection, mitigation, and IOC toolkit for Copy Fail CVE-2026-31431 Linux kernel page-cache privilege escalation

Kernel module for volatile memory acquisition from Linux and Android devices, producing forensically sound captures to disk or over the network.

Open-source cybersecurity knowledge base with 400+ notes, labs, and cheat sheets covering offense, defense, cryptography, cloud, and forensics.

Docker configuration to quickly setup your own Canarytokens.