
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…

Github mirror of official Kismet repository

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Open Source Deep Packet Inspection Software Toolkit

SQL powered operating system instrumentation, monitoring, and analytics.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Automate stopping bad bots from accessing your server

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Advanced Phishing Protection: Suricata rulesets open and free


System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Curated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…

Real-time network diagnostics in your terminal. One command, zero config, instant visibility.

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense +…

Spip network sensor written in Go

Self-contained SSH honeypot for capturing attacker interactions and turning them into structured security intelligence.