
raspi-corelight
Corelight@Home script

Corelight@Home script

Sentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…

Rust tool to detect cell site simulators on an orbic mobile hotspot

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Sniffles: Packet Capture Generator for IDS and Regular Expression Evaluation

Security Tool to detect arp poisoning attacks

A tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

RPi3+ Network Cracker Setup Tool

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…