
beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

NFStream: a Flexible Network Data Analysis Framework.

Purple Team Exercise Framework

A Linux Auditd rule set mapped to MITRE's Attack Framework

Labtainers: A Docker-based cyber lab framework

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.


Structured guide to threat hunting using Zeek logs, aligned with MITRE ATT&CK framework for proactive detection of adversary tactics and techniques.

Framework for implementing Network Intrusion Detection Systems (NIDS) aimed at identifying anomalies in network flows using Federated Learning models.

Berry Sentinel v5.0 — Advanced behavioral C2 and reverse shell detector for Linux/Windows/Unix systems. Features real-time connection analysis,…

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…

Detection of Manjusaka C2 framework

Kernel-runtime defense framework for AF_ALG vulnerabilities, featuring eBPF socket tracing, Ansible hardening, and a crypto auditor for drift…