
Snitch
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

A flow-based network monitor with Deep Packet Inspection

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF…

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

Standalone zero-driver Windows system and API monitor in Rust

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event…

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…

Open-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…

pySigma OpenSearch backend

CVE-2020-9483 OR CVE-2020-13921
