
fastnetmon
Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

Audits Windows event log settings against best-practice guidelines and Sigma-rule detectability, with automated configuration for DFIR readiness.

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

Microsoft Sentinel SIEM Log Source Analyzer

A Zeek OpenVPN protocol analyzer, based on Spicy.

Post-Exploitation EVTX Analyzer for BloodHound Mapping

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…

Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…

Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…

A Zeek OpenVPN protocol analyzer plugin.

Collects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…

A wireshark plugin to instrument ETW

Apache Real Time Logs Analyzer System

Bro analyzer that detects Google's QUIC protocol

Prometheus Firewall Analyzer