nfstream
nfstream/nfstreamNFStream: a Flexible Network Data Analysis Framework.
anomaly-detectioneducationforensics+4
nfstream/nfstreamNFStream: a Flexible Network Data Analysis Framework.
mfthomps/labtainersLabtainers: A Docker-based cyber lab framework
c2dc/anomaly-flowFramework for implementing Network Intrusion Detection Systems (NIDS) aimed at identifying anomalies in network flows using Federated Learning models.
lucadibello/network-attack-detectionAdvanced detection of port scanning, DoS and malware attacks using Machine Learning techniques
daryllundy/cve-2025-32463Detection framework for CVE-2025-32463 sudo privilege escalation vulnerability. Provides real-time monitoring, forensic analysis, and SIEM…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
ethan-andrews/exploitarium-detectionsKQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of…
mouna23/ai-driven-mitre-attackThis repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM.
nsol-nmsu/fml-networkFLNET2023 is a dataset designed for intrusion detection in Federated Learning scenarios. It's built using the CORE emulator, simulating a realistic…
cmpnn-romain/cve-2024-27198_labLab for the CVE-2024-27198
orensv/characterization-and-detection-of-cross-router-covert-channelsThis repository includes the source code used in the "Characterization and Detection of Cross-Router Covert Channels" paper.
zedocun/incident-analysis-response-check-point-security-gateway-cve-2024-24919-lfi-exploitationIncident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check…
g0thamrabb1t/cve-2026-43284-dirtyfrag-detectionLab validation report and detection artifacts for CVE-2026-43284 (DirtyFrag) Linux LPE. Provides auditd telemetry, event correlation rules, and…
tranqtruong/detect-bluekeepa simple tool to detect the exploitation of BlueKeep vulnerability (CVE-2019-0708)
salo-404/firewall🔒 Spring4Shell Firewall Defense — Cybersecurity Incident Simulation This project is part of a Cybersecurity Job Simulation I completed in August…
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
stackrox/stackroxThe StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides…
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…