
opencanary
Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

create cypher create statements for neo4j out of netstat files from multiple machines

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

Daemon to ban hosts that cause multiple authentication errors

** DISPUTED ** 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the…

Audit Guide for the Citrix ADC Vulnerability CVE-2019-19871. Collected from multiple sources and threat assessments. Will be updated as new methods…

ETW and WPP tracing tool for security research. Subscribes to multiple providers, auto-parses events to JSON, and supports advanced filtering,…

a terminal UI to browse bbot reports

Detection Script for MongoBleed Exploitation

Provides BigFix Fixlets and analyses to detect Log4j vulnerabilities (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105) across Windows and Linux…

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.