
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring


Isolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

XDP Based Lightweight and Fast Firewall

Web-based tool for managing and deploying Sysmon configurations across Windows endpoints via agentless (WMI/SMB) or agent-based methods, with remote…

Incident Response collection and processing scripts with automated reporting scripts

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration