securityonion
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
anomaly-detectionanti-botdefensive-tools+9
4.9k
security-onion-solutions/securityonionOpen-source security monitoring platform for threat hunting, intrusion detection, log management, incident response, and endpoint visibility with…
usarmyresearchlab/dshellDshell is a network forensic analysis framework.
dougburks/so-cratesSO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
cyb3r-monk/rita-jImplementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.
zedocun/incident-analysis-response-check-point-security-gateway-cve-2024-24919-lfi-exploitationIncident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check…
security-onion-solutions/security-onionSecurity Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
vignesh07/babysharkFlows-first PCAP TUI (case files, gorgeous UX). Do do do do.
corelight/zeek-community-idZeek support for Community ID flow hashing.
corelight/corelightforsplunkSplunk app for integrating and analyzing Corelight network detection data, enabling real-time threat hunting and incident response.
knqyf263/ndffA flow-based network monitor with Deep Packet Inspection
corelight/zeek-quicBro analyzer that detects Google's QUIC protocol
clausing/scriptsCollection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…