
pySigma-backend-opensearch
pySigma OpenSearch backend

pySigma OpenSearch backend

MysqlHoneypot

Top DNS Measurement for Bro

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

A Zeek OpenVPN protocol analyzer plugin.

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

Tools for investigating Log4j CVE-2021-44228

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)

Slides from various conference talks

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Github mirror of official Kismet repository


IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Honeynet Project generic authenticated datafeed protocol

Network traffic sensor

Threat hunting command system for agentic IDEs

Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.