ericzhao28 / NetDetect

Related projects: ⓘ

• 9b / lazyeye
  Chrome extension to extract data from websites surfed inside of chrome
  ☆18Updated 9 years ago
• D4-project / d4-core
  D4 core software (server and sample sensor client)
  ☆43Updated 8 months ago
• morrigan / user-behavior-anomaly-detector
  User anomaly detector based on logs generated by Osquery framework and machine learning to process those logs.
  ☆33Updated 7 years ago
• telekom-security / ewsposter
  collect logs and alerts from 27 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.
  ☆16Updated last year
• farsightsec / sie-dns-sensor
  Debian and Red Hat packaging for SIE DNS sensor
  ☆14Updated last year
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆83Updated 5 years ago
• w8mej / PoorOperationalSecurityPractices
  Deceptive tradecraft should be fun and light, not stern and stressful. It is cool to be cute.
  ☆13Updated 9 months ago
• blacktop / brobeat
  ☆12Updated this week
• jingconan / SADIT
  Statitical Anomaly Detector of Internet Traffic (SADIT)
  ☆22Updated 7 years ago
• MISP / misp-packer
  Build Automated Machine Images for MISP
  ☆28Updated last year
• counterflow-ai-archive / dragonfly-mle
  ☆52Updated this week
• corelight / pycommunityid
  A Python implementation of the Community ID flow hashing standard
  ☆23Updated 9 months ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆45Updated 2 months ago
• kpolley / RELK
  RELK -- The Research Elastic Stack (Kafka, Beats, Zookeeper, Logstash, ElasticSearch, Kibana, Spark, & Jupyter -- All in Docker)
  ☆26Updated 4 years ago
• Prelude-SIEM / prelude-correlator
  The official Prelude-Correlator GitHub mirror of https://www.prelude-siem.org/projects/prelude-correlator/repository
  ☆10Updated 3 years ago
• cve-search / CVE-Search-MT
  CVE-Search Management Tools - Tools that might be useful for management purposes
  ☆22Updated 8 years ago
• CIRCL / pcapdj
  pcapdj - dispatch pcap files
  ☆45Updated 4 years ago
• mgale / DHCPSnoop
  DHCP Snooping app - great for finding rogue DHCP servers
  ☆34Updated 6 years ago
• gunrock / netflow
  Cybersecurity: Graph Processing using Gunrock.
  ☆11Updated 7 years ago
• stratosphereips / Ludus
  Apply Machine Learning and Game Theory to improve the security of the Turris network of CZ.NIC
  ☆23Updated 4 years ago
• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆27Updated 4 years ago
• oguzy / ovizart
  ☆47Updated 11 years ago
• zeek / zeek-netcontrol
  Connectors for the Zeek NetControl framework
  ☆19Updated 2 years ago
• team-cymru / iocs
  We publish indicators of compromise related to our stories here. See https://blog.team-cymru.com/ for more information.
  ☆9Updated 3 years ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆32Updated this week
• socprime / SigmaRulesIntegration
  ☆15Updated 6 years ago
• dogoncouch / siemstress
  Very basic CLI SIEM (Security Information and Event Management system).
  ☆34Updated 6 years ago
• dgunter / ParseZeekLogs
  Utility for parsing Bro log files into CSV or JSON format
  ☆41Updated last year
• bez0r / BeaconBits
  Network timing evaluation used to detect beacons, works with argus flow as the source
  ☆18Updated 8 years ago
• tijme / detective
  ☆16Updated this week