
sigma-cli
The Sigma command line interface based on pySigma

The Sigma command line interface based on pySigma

Real-time network diagnostics in your terminal. One command, zero config, instant visibility.

SQL powered operating system instrumentation, monitoring, and analytics.

ML-Based behavioral endpoint detection system for Linux machines

Reference implementation for "Hard Stop: Kernel-Level Preemption and Containment for Rogue Agentic Execution". Out-of-band Epistemic Andon Cord,…

Adaptive two-stage Layer 4 DDoS mitigation gateway using behavioral traffic analysis, Random Forest classification, and kernel-level ipset/iptables…

Curated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

JA4+ is a suite of network fingerprinting standards

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

A repository of sysmon configuration modules

TheLightScope

PowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…

DShield Sensor Log Collection with ELK

Detection-engineering reference mapping Windows, cloud, container, identity, and ICS attack classes to Sigma rules, trust-boundary models, BYOVD…

A complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.

Windows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…