mcastens/alycon-threat-landscapeTraining-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…
gmh5225/crowarmorLinux kernel security driver using LSM to harden the system, monitor and restore syscall table integrity, and protect CPU control registers against…
joidiego/detection-struts-cve-2017-5638-detectorReal-time anomaly detection system for Apache Struts CVE-2017-5638 exploit using streaming analytics, 3-gram byte analysis, and Count-Min Sketch.…
itzmeshervin/siem-dashboardA lightweight, real-time Security Information and Event Management (SIEM) dashboard built using Streamlit. It collects system logs, detects USB and…
tdevworks/cve-2020-1472-zerologon-demo-detection-mitigationEducational demo of CVE-2020-1472 (ZeroLogon) detection using Windows Event Logs and Suricata IDS, plus mitigation via Windows Updates. Includes…
fusion1110/ebpf-hid_guardLinux kernel-space HID injection attack detector using eBPF. Monitors USB and Bluetooth HID devices for anomalous keystroke timing and automatically…
rastating/modsecurity-cve-2018-6389A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389
gmh5225/maldec-edrUnix endpoint detection and response solution using kernel-level mechanisms to detect anomalies and malware attacks in real time.
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
echowei/deeptrafficDeep Learning models for network traffic classification
neo23x0/raccineA Simple Ransomware Vaccine
sigmahq/sigma-cliThe Sigma command line interface based on pySigma
an0nud4y/av-edr-lab-environment-setupAV/EDR Lab environment setup references to help in Malware development
wipi-hunter/pisavar📡 🍍Detects activities of PineAP module and starts deauthentication attack (for fake access points - WiFi Pineapple Activities Detection)
a2awais/threat-huntingCurated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…
bombinisecurity/bombinieBPF Security Monitoring and Sandboxing Agent Based on Aya
rnehra01/arp-validatorSecurity Tool to detect arp poisoning attacks
0xe7/wonkavisionDetects forged Kerberos tickets by dumping session and ticket data, scoring anomalies, and generating Windows event-log indicators for SIEM-based…
