spamassassin
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
defensive-toolsemail-securitymachine-learning+1
344
apache/spamassassinOpen-source email filtering framework that detects spam and phishing using content analysis, header checks, Bayesian scoring, and DNS blocklists.
nebulock-inc/agentic-threat-hunting-frameworkATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.
biggiesmallsag/nighthawkresponseIncident Response Forensic Framework
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
ssc-ict-innovatie/nl-kat-coordinationModular network scanning framework that integrates diverse tools and external databases to detect vulnerabilities and configuration errors, producing…
hubblestack/hubbleHubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event…
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
invictus-ir/alfaAutomated forensic analysis tool for Google Workspace audit logs. Acquires all log types, maps events to MITRE ATT&CK Cloud Framework, and identifies…
openpcc/openpccAn open-source framework for verifiably private AI inference
jamf/aftermathSwift-based macOS incident response framework for collecting and analyzing host artifacts, including filesystem timestamps, browser data, unified…
sowdust/tafferugliWeb-based framework for filtering, collecting, and analyzing tweets to detect coordinated behavior, automated posting, and propaganda operations with…
hashicorp-forge/groveA Software as a Service (SaaS) log collection framework.
opendns/datavizOpenDNS Data Visualization Framework
hpthreatresearch/subcrawlModular framework for discovering and analyzing open directories on the web. Crawls URLs, extracts content, applies YARA/ClamAV scanning, and outputs…
datadog/hashYAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.