
stackrox
The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

🚨 Threat intel & incident response research on SharePoint "ToolShell" RCE zero-day (CVE-2025-53770). 🕵️♂️ Covers root-cause deserialization flaws,…

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

Centralized log management platform for collecting, indexing, and analyzing streaming logs, with alerting and event correlation for security…

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Rust tool to detect cell site simulators on an orbic mobile hotspot

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…

Open-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…


Metlo is an open-source API security platform.

NFStream: a Flexible Network Data Analysis Framework.

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

Graph platform for Detection and Response

This project is a SIEM with SIRP and Threat Intel, all in one.

Security event correlation engine for ELK stack

Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense +…