
Patriot-Linux
Host IDS for desktop users
anomaly-detectiondefensive-toolsintrusion-detection

Host IDS for desktop users

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

PowerShell-based backdoor detection tool for VMware Horizon connection servers, targeting CVE-2021-44228. Includes canary with optional submission…

Zeek package for tracking long connections to report them before they have completed.

Experimental Decoy Broker