
Skadi
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Real-time network diagnostics in your terminal. One command, zero config, instant visibility.

psad: Intrusion Detection and Log Analysis with iptables

Easy-to-use live forensics toolbox for Linux endpoints

AzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…

SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...

Passive Laravel middleware that detects and logs SQL injection, XSS, RCE, bot scanners, and 175+ attack patterns. Features a built-in dashboard,…

SQL powered operating system instrumentation, monitoring, and analytics.

The easiest, and most secure way to access and protect all of your infrastructure.

Daemon to ban hosts that cause multiple authentication errors

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…