
etl-parser
Event Trace Log file parser in pure Python

Event Trace Log file parser in pure Python

OSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.

A Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further…

Develop, validate, and publish SIEM detection rules for Elastic Security, with Python CLI tooling, KQL parsing, Kibana integration, and packaged…

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need…

A python package for use in generating fake data for SOC and security automation.

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282,…

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.

Python script to search Citrix NetScaler logs for possible CVE-2023-4966 exploitation.

Daemon to ban hosts that cause multiple authentication errors

A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral…

OWASP Honeypot, Automated Deception Framework.

SSH bastion/jump host/jumpserver

Execution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.

Database Driven DNS Server with a Web UI