
packetfence
PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

Rust tool to detect cell site simulators on an orbic mobile hotspot

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

JA4+ is a suite of network fingerprinting standards

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

Sentinel detection lab for MCP attack chains: CVE-2026-26118 SSRF token theft, tool poisoning, cross-server exfiltration, identity post-exploitation.…

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

A real-time traffic monitoring tool that detects and displays network traffic volume per IP address to identify potential DDoS attacks.

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…


SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber…

Kernel-level security engine using eBPF-LSM to enforce file access policies based on process lineage, protecting sensitive data from supply-chain…

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring

A Zeek package to detect the Pingback malware ICMP tunnel command and control (C2) network traffic.

a simple tool to detect the exploitation of BlueKeep vulnerability (CVE-2019-0708)

Automated Network Security with Rust: Detecting and Blocking Port Scanners