
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Android Logs Events And Protobuf Parser

Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Real-time network diagnostics in your terminal. One command, zero config, instant visibility.

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Real-time monitoring and slowlog analysis for Valkey and Redis databases with anomaly detection, ACL auditing, and Prometheus metrics export.

eBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.

A repository of sysmon configuration modules

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

SQL powered operating system instrumentation, monitoring, and analytics.

Security Governance for Agentic AI

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Enhanced SSH client with TUI — manage connections, keys, and sessions

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…


Passive DNS Capture and Monitoring Toolkit
