
wstrace
Standalone zero-driver Windows system and API monitor in Rust

Standalone zero-driver Windows system and API monitor in Rust

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

pySigma OpenSearch backend

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

A flow-based network monitor with Deep Packet Inspection

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…

Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event…

CVE-2020-9483 OR CVE-2020-13921

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.


OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Open-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…

An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch