
QuietPhase
Pwsh tool for AD Group Enumeration Auditing

Pwsh tool for AD Group Enumeration Auditing

System-independent library for user-level packet capture and filtering. Provides a portable framework for low-level network monitoring, security…

Github mirror of official Kismet repository


IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

A Wordpress Honeypot

Honeynet Project generic authenticated datafeed protocol

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

Network traffic sensor

Primary data pipelines for intrusion detection, security analytics and threat hunting

Tools for investigating Log4j CVE-2021-44228

Generates efficient IPv4 blocklists from Zeek network flows using multiple prioritization models (new, consistent, random forest) to identify…

Threat hunting command system for agentic IDEs

MysqlHoneypot

Multivariate statistical network monitoring sensor that detects anomalies using PCA-based techniques, aggregating lightweight statistics from…

Top DNS Measurement for Bro