
loki
Horizontally scalable, multi-tenant log aggregation system that indexes labels instead of full text, integrates with Grafana, and is optimized for…

Horizontally scalable, multi-tenant log aggregation system that indexes labels instead of full text, integrates with Grafana, and is optimized for…

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

A desktop workbench for writing, validating, compiling, and testing YARA rules.

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

privacy-first, open-source and free idevice management tool written in Rust and Qt

Open-source detection engineering tool that traces security detections end to end and identifies the first failing stage.

An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…

Portable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

Distributed alerting for the masses!

Extract indicators of compromise from text, including "escaped" ones.


Generate bulk YARA rules from YAML input

Flows-first PCAP TUI (case files, gorgeous UX). Do do do do.