
ElectricEye
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

eBPF-powered Linux observability with AI incident detection. AGPL-3.0 licensed.

Semantic Observability for UNIX Systems - A lightweight C-based system prober with AI-powered analysis

Azure-based client inventory and drift detection tool that collects Windows configuration data (antivirus, patching, Bitlocker) into LogAnalytics for…

Automatically generated Sysmon parser for Azure Sentinel

DEF CON Cloud Village workshop slides teaching KQL for cloud security log analysis, with practical exercises in a shared Azure Log Analytics…


Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

A Software as a Service (SaaS) log collection framework.

Easy-to-use live forensics toolbox for Linux endpoints

Open-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…