
BLUESPAWN
An Active Defense and EDR software to empower Blue Teams

An Active Defense and EDR software to empower Blue Teams

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

DShield Sensor Log Collection with ELK

CVE-2025-31324 & CVE-2025-42999 vulnerability and compromise assessment tool

SQL powered operating system instrumentation, monitoring, and analytics.

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Automate the creation of a lab environment complete with security tooling and logging best practices


Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

A Simple Ransomware Vaccine

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

Blue Team detection lab created with Terraform and Ansible in Azure.

Parses Snaffler output file and generate beautified outputs.

Collects and analyzes AD and Azure AD authentication logs to detect lateral movement attacks using graph-based anomaly detection, visualizing…

DFIR forensics companion server + capture extension

Open source Baltic Sea shadow fleet tracker. 1200+ vessels, live AIS, cable proximity alerts. No cloud, no subscription, runs locally

Finds the detection rules in your SIEM that are running blind