
SuricataLog
Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

Lightweight batch script for semi-automated acquisition of key forensic artefacts from Windows hosts, using only native OS tools to support incident…

Find phishing kits which use your brand/organization's files and image.

This is a bash script focus on hardening linux. This is a custom think of windows defender but unlike of their privacy issue. User can feel freedom…

A host-based IDS and network monitoring system (My graduation project)

Zeek log enrichment tool that adds host information and known entity references to enhance network security monitoring and incident response.