raspi-corelight
corelight/raspi-corelightCorelight@Home script
intrusion-detectionlog-analysisnetwork-security+1
corelight/raspi-corelightCorelight@Home script
offseckit/cve-2026-23813CVE-2026-23813 — AOS-CX pre-auth bypass via nginx regex. Detection script, bypass demo, config-disclosure PoC, and IDS rules.
abertaymachinelearninggroup/network-threats-taxonomyMachine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic…
efforg/rayhunterRust tool to detect cell site simulators on an orbic mobile hotspot
sans-blue-team/deepbluecliPowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
idaholab/malcolmMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…
ait-aecid/logdata-anomaly-minerThis tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…
benjeems/packetstriderA network packet forensics tool for SSH
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
facebook/mcpguard-dynamicKernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)
kevin-robertson/conveighConveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool
arthastang/iot-home-guardA tool for malicious behavior detection in IoT devices
halildeniz/networkassessmentNetworkAssessment: Network Compromise Assessment Tool
nccgroup/ip-reputation-snort-rule-generatorA tool to generate Snort rules based on public IP reputation data
rnehra01/arp-validatorSecurity Tool to detect arp poisoning attacks
ncsc-nl/citrix-2025Digital forensics and incident response tool using YARA rules to scan Citrix NetScaler core dumps, disk images, and live hosts for signs of…