Lightweight open-core SIEM in Rust — ClickHouse for logs, Postgres for state.
☆68Aug 12, 2026Updated last week
Alternatives and similar repositories for nano
Users that are interested in nano are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Public Chronicle Detection Rules☆12Apr 25, 2023Updated 3 years ago
- ☆18Feb 2, 2026Updated 6 months ago
- A tiny AI-based coding assistant that submits PRs, written in Go mostly using AI.☆14Nov 18, 2024Updated last year
- A lab environment for learning about MSTICPy☆38Feb 3, 2023Updated 3 years ago
- Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect se…☆25Jul 12, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A GUI tool to build, and rebuild, Debian and Ubuntu Live ISO images.☆11May 25, 2017Updated 9 years ago
- Bro analyzer that detects Google's QUIC protocol☆11Mar 2, 2021Updated 5 years ago
- LetMeOutOfYour.net Resources☆21Apr 11, 2026Updated 4 months ago
- Vigil - a 100% OpenSource AI system for machine-speed network defense☆259Updated this week
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆24Oct 9, 2024Updated last year
- Self sustainable DOM content fuzzy hashing☆11Oct 5, 2024Updated last year
- A complete Sigma detection engineering toolkit: parser, linter, evaluator, correlation engine, conversion framework, streaming daemon, MC…☆133Updated this week
- Windows Batch script to install and setup the Splunk Universal Forwarder☆11Feb 24, 2020Updated 6 years ago
- Research PoC demonstrating Linux Kernel hooking plus defences.☆36Apr 13, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AntiVE-BehaviorWatch is an advanced behavioral analysis malware that detects automated analysis systems through real-time mouse movement …☆38Jul 12, 2026Updated last month
- Open-source AI-powered GRC platform with multi-framework compliance management, crosswalk intelligence, and BYOK AI analysis. Supports NI…☆26Updated this week
- Ludus range for the Constructing Defense Lab☆136Jul 28, 2026Updated 3 weeks ago
- ☆40Oct 16, 2025Updated 10 months ago
- Passive OSINT engine: one seed domain → full infrastructure cluster. Automates Ryan McDonald's scam-kit fingerprinting methodology. crt.s…☆26May 25, 2026Updated 2 months ago
- Real-time supply chain threat detection for package ecosystems. Monitors PyPI and npm release streams, prioritizes packages by cascade im…☆48Mar 26, 2026Updated 4 months ago
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Aug 15, 2026Updated last week
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆59Mar 5, 2026Updated 5 months ago
- ☆37Aug 21, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆18Jan 5, 2026Updated 7 months ago
- Similarius is a Python library to compare web page and evaluate the level of similarity.☆24Mar 2, 2026Updated 5 months ago
- Inline proxy for software package registries to provide observability and policy controls to installs.☆51Jun 5, 2026Updated 2 months ago
- My personal experience in Threat Hunting and knowledge gained so far.☆19May 27, 2017Updated 9 years ago
- Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code an…☆58Aug 13, 2026Updated last week
- a BOF implementation of various registry persistence methods☆98Nov 11, 2025Updated 9 months ago
- LLVM Pass which inserts an opaque predicate at the end of a function, filled with junk bytes to cause IDA analysis to fail (x86_64)☆15May 11, 2025Updated last year
- ☆17Jul 31, 2024Updated 2 years ago
- Pyside6 implementation of YaraXGUI☆28Aug 12, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- MCP to help Defenders Detection Engineer Harder and Smarter☆471Jun 16, 2026Updated 2 months ago
- A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust☆35Aug 13, 2026Updated last week
- A web application testing tool built for capturing and modifying http/https requests.☆15Oct 15, 2025Updated 10 months ago
- Data for CyberSOCEval, an LLM benchmark by Meta & CrowdStrike☆23Sep 22, 2025Updated 11 months ago
- Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.☆115Dec 3, 2025Updated 8 months ago
- ☆25Aug 25, 2015Updated 10 years ago
- Linux version of Splunk MCP LLM MCP SIEMulator . A Docker lab integrating Splunk SIEM with Ollama LLM via Model Context Protocol for AI-p…☆18Jun 20, 2026Updated 2 months ago