How to setup a honeypot with an IDS, ELK and TLS traffic inspection
☆166Jul 11, 2022Updated 4 years ago
Alternatives and similar repositories for how-to-setup-a-honeypot
Users that are interested in how-to-setup-a-honeypot are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC☆12Apr 7, 2025Updated last year
- A honeypot for the Log4Shell vulnerability (CVE-2021-44228).☆94Nov 29, 2024Updated last year
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Jun 18, 2026Updated 4 months ago
- Training scenarios for cyber ranges☆15Apr 24, 2020Updated 6 years ago
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Log4j honeypot to capture payloads within HTTP headers, query parameters and POST requests.☆14Dec 15, 2021Updated 4 years ago
- Source of the project website☆25Oct 9, 2026Updated 3 weeks ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- A collection of tips for using MISP.☆77Dec 11, 2024Updated last year
- ☆74Oct 16, 2022Updated 4 years ago
- Live Feed of C2 servers, tools, and botnets☆783Apr 13, 2026Updated 6 months ago
- A community event for security researchers to share their favorite notebooks☆109Feb 15, 2024Updated 2 years ago
- A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.☆41Updated this week
- ☆11Aug 10, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆35Aug 8, 2023Updated 3 years ago
- ACT documentation repo☆16May 22, 2024Updated 2 years ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆347Dec 3, 2025Updated 10 months ago
- gundog - guided hunting in Microsoft Defender☆53Apr 29, 2021Updated 5 years ago
- SANS #CTI Summit 2025☆13Jan 28, 2025Updated last year
- MISP Playbooks☆237Oct 14, 2025Updated last year
- Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using…☆28May 6, 2024Updated 2 years ago
- An Ansible playbook for deploying the Suricata intrusion detection system and fetching Snort rules with Oinkmaster.☆17Oct 30, 2021Updated 5 years ago
- DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.☆578Dec 12, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- ☆71May 3, 2021Updated 5 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆98May 28, 2023Updated 3 years ago
- A collection of cyberchef recipes for use in osint investigations☆14Jul 2, 2022Updated 4 years ago
- ☆12Dec 26, 2022Updated 3 years ago
- Extensions for Zeek's Intelligence Framework.☆11Mar 1, 2022Updated 4 years ago
- Notebooks created to attack and secure Active Directory environments☆26Nov 18, 2019Updated 6 years ago
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 5 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- NGSOTI☆10Oct 8, 2026Updated 3 weeks ago
- ☆64Apr 1, 2021Updated 5 years ago
- BlueHound - pinpoint the security issues that actually matter☆783Jul 12, 2023Updated 3 years ago
- AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE…☆1,258Updated this week
- Sentinel Guard - Use to build up Honeypot and Honeynet with ZERO cost easily and simply.☆18Jul 25, 2021Updated 5 years ago
- Searching .evtx logs for remote connections☆24Jul 6, 2023Updated 3 years ago
- All sysmon event types and their fields explained☆576Nov 13, 2021Updated 4 years ago