
IPBan
Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

Endpoint behavior monitoring and analysis system for processes, files, registry, and networks. Supports scripting, extensions, and plugins for…

KQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of…

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

Windows honeypot using ProjFS to project decoy files that trigger Event Log and desktop alerts when accessed, with SMB remote session logging for…

This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…

Daemon to ban hosts that cause multiple authentication errors

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

A Wordpress Honeypot

Primary data pipelines for intrusion detection, security analytics and threat hunting

NetworkAssessment: Network Compromise Assessment Tool

Pre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.

Mapping Corelight or Zeek data to Elastic Common Schema logs

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you…

Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool

Security Tool to detect arp poisoning attacks