
DetectionLab
Automate the creation of a lab environment complete with security tooling and logging best practices

Automate the creation of a lab environment complete with security tooling and logging best practices

NFStream: a Flexible Network Data Analysis Framework.

An ADCS honeypot to catch attackers in your internal network.

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources…

Kernel-level security engine using eBPF-LSM to enforce file access policies based on process lineage, protecting sensitive data from supply-chain…

FLNET2023 is a dataset designed for intrusion detection in Federated Learning scenarios. It's built using the CORE emulator, simulating a realistic…

Open-source deception platform that turns any Linux machine into a high-signal canary. Deploy tripwire sensors on files, ports, and network services…

Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma