
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

🐍 High-performance, multi-threaded YARA & IOC scanner

NetworkAssessment: Network Compromise Assessment Tool

Open-source network IDS/IPS/NSM engine for real-time traffic inspection, intrusion detection and prevention, protocol analysis, and rule-based threat…

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

JA4+ is a suite of network fingerprinting standards

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

An ADCS honeypot to catch attackers in your internal network.

A network packet forensics tool for SSH

Network traffic sensor

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.