
ThreatIngestor
Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

Automated Network Security with Rust: Detecting and Blocking Port Scanners

PowerShell-based backdoor detection tool for VMware Horizon connection servers, targeting CVE-2021-44228. Includes canary with optional submission…

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

Machine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic…

Rust tool to detect cell site simulators on an orbic mobile hotspot

PowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

A network packet forensics tool for SSH

Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)

A tool for malicious behavior detection in IoT devices

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

A process monitoring tool that tries to detect exploitation

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
