IQTLabs / portunus
A user-friendly tool for creating multi-tenant environments to run experiments in, such as detecting lateral movement attacks.
☆11Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for portunus
- Vent is a light-weight platform built to automate network collection and analysis pipelines using a flexible set of popular open source t…☆76Updated 4 years ago
- Browser-based visualization tool that uses JSON and an interactive enclosure diagram to visualize networks.☆58Updated last year
- A platform built for easy-to-use automated network traffic analysis☆58Updated last year
- Network Tools☆32Updated 11 months ago
- Machine learning plugins for network traffic☆121Updated last year
- PCAPPlot provides a quick visual snapshot, or thumbnail, of a network packet capture (PCAP file) from the perspective of a single host/de…☆16Updated 3 years ago
- MulVAL: A logic-based, data-driven enterprise network security analyzer - Originally developed at Kansas State University, updated for Cy…☆31Updated 5 months ago
- DynamiteNSM is a free Network Security Monitor developed by Dynamite Analytics to enable network visibility and advanced cyber threat det…☆164Updated last year
- something i needed once☆18Updated 13 years ago
- Application Layer IDS/IPS with iptables☆73Updated 5 years ago
- System for network traffic analysis and anomaly detection.☆86Updated 2 weeks ago
- Passive Real-time Asset Detection System☆231Updated 5 months ago
- Connectors for the Zeek NetControl framework☆19Updated 2 years ago
- Detect cryptocurrency mining traffic with Zeek.☆46Updated 3 years ago
- DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text fil…☆78Updated 9 months ago
- DEPRECATED USE v3!☆59Updated 9 years ago
- Poseidon is a python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a numbe…☆422Updated 2 months ago
- With the hope that someone finds the data useful, we used to periodically publish an archive of almost all of the non-sensitive vulnerabi…☆88Updated 5 months ago
- A tool for characterizing the network behavior of IoT Devices. The primary intended use is to assist in the generation of allowlist files…☆22Updated 8 months ago
- Snort in Docker for Network Functions Virtualization (NFV)☆106Updated 5 years ago
- STIX Tools & Scripts☆47Updated 10 years ago
- OpenFPC, Open Source Full Packet Capture☆71Updated 5 years ago
- Bro IDS programs collection.☆146Updated 5 years ago
- Time-Machine Dynamic Bulk Packet Recorder☆35Updated 10 months ago
- PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK☆85Updated last year
- Apache Metron☆59Updated 4 years ago
- Structured Threat Intelligence Graph☆87Updated last week