
ntopng
Web-based Traffic and Cybersecurity Network Traffic Monitoring

Web-based Traffic and Cybersecurity Network Traffic Monitoring

Blazing-Fast Token-Efficient Intrusion Detection System (IDS) based on TypeSafe's Jev.

Containerized network traffic analysis suite ingesting PCAP, Zeek logs, and Suricata alerts for automated normalization, enrichment, and correlation…

Centralized log management platform for collecting, indexing, and analyzing streaming logs, with alerting and event correlation for security…

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

pySigma OpenSearch backend

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…

The Sigma command line interface based on pySigma

Open-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Daemon to ban hosts that cause multiple authentication errors

Hunt WiFi threats silently. Catch the hackers.

TheLightScope

Mapping Corelight or Zeek data to Elastic Common Schema logs

A repository to share publicly available Velociraptor detection content

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

Detect Tactics, Techniques & Combat Threats

A Prometheus Exporter for Suricata