HIDS全称是Host-based Intrusion Detection System，即基于主机型入侵检测系统，HIDS运行依赖这样一个原理：一个成功的入侵者一般而言都会留下他们入侵的痕迹。本人更倾向于通过记录主机的重要信息变更来发现入侵者。 本项目由两部分组成：一部分osquery、另一部分监控脚本来补充osquery规则的不足； 本文是第一部分osquery规则部分，实现绝大部分主机信息监控。
☆107Dec 29, 2017Updated 8 years ago
Alternatives and similar repositories for HIDS
Users that are interested in HIDS are comparing it to the libraries listed below
Sorting:
- 以甲方安全人员的视角，尽可能收集发现企业的域名和服务器公网IP资产☆65Dec 15, 2017Updated 8 years ago
- By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.☆603Apr 1, 2021Updated 4 years ago
- 针对大量WEB资产进行分布式WEB安全扫描，发现web环境下常规的一些安全漏洞☆99Apr 19, 2019Updated 6 years ago
- [archived] 一款实验性质的主机入侵检测系统☆2,189Jun 29, 2020Updated 5 years ago
- Zero Trust Network Framework☆10Sep 29, 2019Updated 6 years ago
- SDL China☆33Nov 8, 2018Updated 7 years ago
- 护网杯 2018 WEB (1) easy_tornado☆15Aug 22, 2019Updated 6 years ago
- 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。☆2,807Aug 7, 2022Updated 3 years ago
- Open-Source Security Architecture | 开源安全架构☆943May 10, 2021Updated 4 years ago
- 自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统，本系统属于漏洞验证部分，根据提供的数据进行分布式安全验证，确定是否包含相关严重漏洞。☆49Dec 26, 2017Updated 8 years ago
- ipstatistics is a script based on the ipip library that is used to quickly filter the ip list.☆14Aug 21, 2020Updated 5 years ago
- Network Security Vulnerability Scanner☆115May 15, 2023Updated 2 years ago
- Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等☆1,261Jul 8, 2023Updated 2 years ago
- 基于 Docker 的真实应用测试环境☆262Aug 14, 2023Updated 2 years ago
- 一个HIDS agent端的demo☆17Feb 29, 2020Updated 6 years ago
- 测评工具☆308Mar 25, 2021Updated 4 years ago
- WAF测试工具---用例测试（增加result输出）☆13Mar 6, 2015Updated 10 years ago
- 基于深度学习的cms识别 训练集☆16Sep 22, 2018Updated 7 years ago
- CloudWalker Platform☆677Dec 14, 2022Updated 3 years ago
- 合规审计平台☆472Mar 23, 2022Updated 3 years ago
- Webshell扫描工具，通过各种规则和算法实现服务器脚本后门查杀☆122Aug 22, 2016Updated 9 years ago
- Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)☆305Nov 30, 2024Updated last year
- 洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。☆1,181Jan 12, 2021Updated 5 years ago
- 对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险☆608Apr 12, 2021Updated 4 years ago
- Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and ser…☆2,578Updated this week
- Suricata安装部署&丢包优化&性能调优&规则调整&Pfring设置☆143Oct 14, 2019Updated 6 years ago
- 处于原型阶段☆20Nov 30, 2021Updated 4 years ago
- CTF学习交流入群题 Web 20180626☆24Sep 28, 2019Updated 6 years ago
- MOSEC-X-PLUGIN 后端API服务☆24Aug 11, 2020Updated 5 years ago
- 甲方安全工程师必备，内部钓鱼系统☆230Jan 15, 2022Updated 4 years ago
- weblog/dnslog平台 Docker容器化部署☆36Jan 12, 2022Updated 4 years ago
- 红队基础设施自动化部署工具☆852Jan 4, 2023Updated 3 years ago
- HCTF2018 all challenge☆91Nov 13, 2018Updated 7 years ago
- Linux命令转发记录☆62Jul 15, 2019Updated 6 years ago
- 三方依赖库扫描系统☆91Jun 10, 2021Updated 4 years ago
- 安全编排与自动化响应平台☆62Dec 16, 2020Updated 5 years ago
- Airbug(空气洞)，收集漏洞poc用于安全产品☆355Sep 26, 2019Updated 6 years ago
- "星云"业务风控系统，主工程☆1,097Jul 28, 2023Updated 2 years ago
- TokyoWesterns CTF 4th 2018 shrine☆12Aug 23, 2019Updated 6 years ago