
Detection
Curated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…

Curated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…

Easy to configure Honeypot for Blue Team

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

JA4+ is a suite of network fingerprinting standards

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

A Canary which fires when uninstalled

A host-based IDS and network monitoring system (My graduation project)


Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…