LuLu
objective-see/luluOpen-source macOS firewall that monitors and controls network connections, blocking unauthorized outbound and inbound traffic with per-application…
defensive-toolsnetwork-security
objective-see/luluOpen-source macOS firewall that monitors and controls network connections, blocking unauthorized outbound and inbound traffic with per-application…
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
microlaser/dns_watchdog_windows2PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…
davidsonrafaelk/evillimiterTool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
siberanka/rdp-guardMonitors Windows Security logs for failed RDP attempts and automatically blocks abusive IPs via Windows Firewall, with configurable thresholds and…
owasp/intrusion-alert-educational-network-idsLightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…
jlinebau/cve-2025-55315-scanner-monitorQuick and Simple Scripts to Scan for Vulnerable Servers and Packet Level Monitors
corelight/detect-ransomware-filenamesZeek script that monitors SMB traffic and alerts on known ransomware filenames using the Anti-Ransomware File System Resource Manager list.
bahaabdelwahed/stIoT protocol threat detection tool that scans devices for vulnerabilities, searches CVEs/PoCs, analyzes firmware, and monitors MQTT/UPnP traffic to…
corelight/zeek-community-idZeek support for Community ID flow hashing.
cisco-talos/mutiny-fuzzerNetwork protocol fuzzer that replays PCAP traffic through a mutational engine (Radamsa) to quickly discover vulnerabilities in target hosts via…
mckinnonit/zabbix-template-cve-2020-1472Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event…
bitbrute/evillimiterTool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
bitbrute/evillimiter-windowsTool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access (for Windows only)
sinologicnet/sipcheckMonitors Asterisk authentication logs and automatically bans IPs with repeated failed login attempts using iptables, with configurable thresholds and…
shellster/dcsyncmonitorMonitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
puniaze/portdogNetwork anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…
themson/shellshockscripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271