
icannTLD
Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

Training-free anomaly detection framework using Shannon Entropy, Fisher Information, and Wasserstein Distance to map system states into geometrically…

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

MysqlHoneypot

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Github mirror of official Kismet repository

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.


Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

A Wordpress Honeypot

Network traffic sensor

Honeynet Project generic authenticated datafeed protocol

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

Primary data pipelines for intrusion detection, security analytics and threat hunting

Tools for investigating Log4j CVE-2021-44228

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

LLMNR/NBNS/mDNS Spoofing Detection Toolkit