kismet
kismetwireless/kismetGithub mirror of official Kismet repository
information-gatheringintrusion-detectionnetwork-security+2
kismetwireless/kismetGithub mirror of official Kismet repository
osquery/osquerySQL powered operating system instrumentation, monitoring, and analytics.
ossec/ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…
elastic/detection-rulesDevelop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
fankh/vulnerability-pocCVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security…
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
fail2ban/fail2banDaemon to ban hosts that cause multiple authentication errors
beenuar/aisocSelf-hostable AI SOC that fuses security alerts, auto-triages via agentic AI, runs MITRE ATT&CK investigations, and logs every agent decision in a…
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
azure/azure-sentinelCloud-native SIEM for intelligent security analytics for your entire enterprise.
cyb3rxp/awesome-socA curated knowledge base to build, run and mature a SOC (including CSIRT).
a2awais/threat-huntingCurated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
nzymeorg/nzymeWiFi, Bluetooth and Ethernet Threat Detection.
inverse-inc/packetfencePacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…