
zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Open Source Deep Packet Inspection Software Toolkit

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Github mirror of official Kismet repository

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Curated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…

TheLightScope

Spip network sensor written in Go

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

SQL powered operating system instrumentation, monitoring, and analytics.

Automate stopping bad bots from accessing your server

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Free access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…


User-space bot and DDoS deflection for small HTTP services

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…