
LogsTotal
Self-hosted multi-engine Sigma detection for event logs

Self-hosted multi-engine Sigma detection for event logs

Daemon to ban hosts that cause multiple authentication errors

Interactive GNU/Linux application firewall that filters outbound connections, blocks ads and malware domains, manages system firewall rules via GUI,…

A repository of sysmon configuration modules

Rust-based endpoint security agent with application whitelisting, attack detection, and prevention. Supports multiple platforms with audited…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Runtime application self-protection engine that hooks into application servers to monitor and block malicious database queries, file operations, and…

Docker configuration to quickly setup your own Canarytokens.

A utility to safely generate malicious network traffic patterns and evaluate controls.

DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!

A high interaction SSH honeypot

Hunt WiFi threats silently. Catch the hackers.

Bilgisayarınıza yapılan ARP Spoofing saldırılarını tespit eden ARP Spoof Detector Scripti.