
security checks
linux security checks

linux security checks
Linux kernel security driver using LSM to harden the system, monitor and restore syscall table integrity, and protect CPU control registers against…

Graph platform for Detection and Response

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

Endpoint behavior monitoring and analysis system for processes, files, registry, and networks. Supports scripting, extensions, and plugins for…

Pulled Pork for Snort and Suricata rule management (from Google code)

Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.

PoC and Detection for CVE-2024-21626

Sniffles: Packet Capture Generator for IDS and Regular Expression Evaluation

Go library for parsing and executing Sigma detection rules against log entries, supporting field modifiers, CIDR matching, and custom field resolvers…

A collection of Tools and Rules for decoding Brute Ratel C4 badgers

Regex-based malicious traffic detection add-on for OWASP ZAP. Flags compromised websites by matching URI and HTML patterns, with color-coded alerts…

Sigma rules for detecting Lazarus Group TTPs, covering malicious document execution, PowerShell abuse, scheduled tasks, and credential access,…

Chronicle parser for CORELIGHT and related information.

DNS Dashboard for hunting and identifying beaconing