
Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…

A modern and elegant dashboard for network traffic visualization and analysis.

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs…

Deception-engineering tools pulled from a production platform that takes live attacker traffic, supply-chain canary tokens, honeypot logs → MITRE…

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

Bash tool used for proactive detection of malicious activity on macOS systems.

create cypher create statements for neo4j out of netstat files from multiple machines

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE…

Single-page web dashboard for Meshtastic mesh networks with live network mapping, packet analysis, chat, sensor telemetry, and topology…

Parses Snaffler output file and generate beautified outputs.

Installs and configures a DShield honeypot sensor on Raspberry Pi or Ubuntu, running Cowrie SSH and HTTP honeypots and forwarding firewall logs to…

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

This repository contains a list of new remediation scripts.