
SuricataLog
Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

RPi3+ Network Cracker Setup Tool

Monitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…

A tool to assist with network-based hunting for GRU's Drovorub malware c2

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent…

Sniffles: Packet Capture Generator for IDS and Regular Expression Evaluation

Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research

JA4+ is a suite of network fingerprinting standards

A simple tool to detect NBT-NS and LLMNR spoofing (and messing with them a bit)

Rust tool to detect cell site simulators on an orbic mobile hotspot

A tool for malicious behavior detection in IoT devices

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

A binary and file access authorization system for macOS.

Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring

Automated Network Security with Rust: Detecting and Blocking Port Scanners