cve-2021-1675-printnightmare
initconf/cve-2021-1675-printnightmareZeek package to detect CVE-2021-1675 (PrintNightmare) by monitoring named pipes and RPC operations for spoolss exploitation attempts.
exploitationids-ips-evasionintrusion-detection+2
initconf/cve-2021-1675-printnightmareZeek package to detect CVE-2021-1675 (PrintNightmare) by monitoring named pipes and RPC operations for spoolss exploitation attempts.
tranqtruong/detect-bluekeepa simple tool to detect the exploitation of BlueKeep vulnerability (CVE-2019-0708)
nicholasadamou/minipwnerA script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "dropbox".
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
adarkst/honeypot_smart_infrastructureThis Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
netalertx/netalertxCentralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…
yamato-security/enablewindowslogsettingsDocumentation and scripts to properly enable Windows event logs.
duggytuxy/syswardenHost-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…
shirkdog/pulledporkPulled Pork for Snort and Suricata rule management (from Google code)
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
fksvs/siperXDP Based Lightweight and Fast Firewall
osbornepro/btps-secpackPowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…
safeagent-beihang/clawguardEnterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…