
NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

A utility to safely generate malicious network traffic patterns and evaluate controls.

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

An open-source, self-hosted AI-powered SIEM, EDR and SOAR platform for modern security operations.

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

RPi3+ Network Cracker Setup Tool

Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)

CVE-2020-0618 Honeypot