Alternatives and similar repositories for kairos

Users that are interested in kairos are comparing it to the libraries listed below

• threaTrace-detector / threaTrace

  View on GitHub
  ☆123May 3, 2023Updated 2 years ago
• FDUDSDE / MAGIC

  View on GitHub
  Codes and data for USENIX Security 24 paper "MAGIC: Detecting Advanced Persistent Threats via Masked Graph Representation Learning"
  ☆133Oct 24, 2024Updated last year
• PKU-ASAL / Simulated-Data

  View on GitHub
  ☆86Feb 24, 2025Updated 11 months ago
• jun-zeng / ShadeWatcher

  View on GitHub
  SHADEWATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records, Oakland'22
  ☆83Jun 6, 2023Updated 2 years ago
• syssec-utd / provninja

  View on GitHub
  Evading Provenance-Based ML Detectors with Adversarial System Actions
  ☆35Aug 18, 2024Updated last year
• purseclab / ATLAS

  View on GitHub
  ATLAS: A Sequence-based Learning Approach for Attack Investigation
  ☆176Sep 3, 2022Updated 3 years ago
• sbustreamspot / sbustreamspot-data

  View on GitHub
  Datasets used in the StreamSpot experiments
  ☆66Feb 18, 2016Updated 9 years ago
• hwwzrzr / APT-KGL

  View on GitHub
  APT-KGL: An Intelligent APT Detection System Based on Threat Knowledge and Heterogeneous Provenance Graph Learning
  ☆78Jul 8, 2022Updated 3 years ago
• jun-zeng / Audit-log-analysis

  View on GitHub
  Have fun with audit log analysis :)
  ☆154May 5, 2024Updated last year
• LexusWang / CAPTAIN

  View on GitHub
  ☆32Jul 21, 2025Updated 6 months ago
• usenixsub / DepImpact

  View on GitHub
  ☆20Oct 31, 2020Updated 5 years ago
• EnesAltinisik / ProvG-Searcher

  View on GitHub
  ☆19Nov 27, 2023Updated 2 years ago
• xyzstudent / labeled_darpa_optc

  View on GitHub
  Code for labeling malicious powershell events in the fiveeyes Darpa OPTC dataset
  ☆12Jun 22, 2023Updated 2 years ago
• darpa-i2o / Transparent-Computing

  View on GitHub
  Material from the DARPA Transparent Computing Program
  ☆227Apr 29, 2020Updated 5 years ago
• ksatvat / EXTRACTOR

  View on GitHub
  ☆86Mar 29, 2023Updated 2 years ago
• SparkyAndy / XCS229ii-FinalProject

  View on GitHub
  ☆12Jun 11, 2021Updated 4 years ago
• tanishqjasoria / darpa-tc-en5

  View on GitHub
  Instructions and tools to use data from engagement 5 of Darpa Transparent Computing Program
  ☆26Aug 13, 2021Updated 4 years ago
• C0ldstudy / Argus

  View on GitHub
  [S&P 2024] Understanding and Bridging the Gap Between Unsupervised Network Representation Learning and Security Analytics.
  ☆17Apr 25, 2025Updated 9 months ago
• dhl123 / Leonard

  View on GitHub
  Usenix Security'23
  ☆16Feb 14, 2023Updated 3 years ago
• iHeartGraph / Euler

  View on GitHub
  ☆58Nov 6, 2023Updated 2 years ago
• FiveDirections / OpTC-data

  View on GitHub
  ☆132Jun 17, 2020Updated 5 years ago
• crimson-unicorn / parsers

  View on GitHub
  ☆25Jun 11, 2021Updated 4 years ago
• LDragon-yu / TC_e5

  View on GitHub
  Some personal work on DARPA TC engagement5
  ☆20Aug 7, 2023Updated 2 years ago
• EFI-Demo / Endpoint-Forecasting-and-Interpreting

  View on GitHub
  We propose Endpoint Forecasting and Interpreting (EFI), a real-time attack forecast and interpretation system, which can automatically pr…
  ☆15Aug 16, 2023Updated 2 years ago
• tfjmp / provenance-papers

  View on GitHub
  ☆102Nov 26, 2020Updated 5 years ago
• sbustreamspot / sbustreamspot-core

  View on GitHub
  Core streaming heterogeneous graph clustering and anomaly detection code (KDD 2016)
  ☆41Apr 23, 2020Updated 5 years ago
• crimson-unicorn / analyzer

  View on GitHub
  GraphChi's C++ version. Big Data - small machine.
  ☆17Nov 29, 2020Updated 5 years ago
• rpaudel42 / Pikachu

  View on GitHub
  PIKACHU: Temporal Walk Based Dynamic Graph Embedding for Network Anomaly Detection
  ☆17Apr 19, 2023Updated 2 years ago
• JakubReha / ProvCTDG

  View on GitHub
  Implementation of the paper: "Anomaly Detection in Continuous-Time Temporal Provenance Graphs". The code follows the CTDG framework https…
  ☆21Nov 22, 2023Updated 2 years ago
• eastmountyxz / APT-ProvenanceGraph

  View on GitHub
  该资源是各种溯源图相关的论文和资源总结（含PPT），涉及APT攻击检测、入侵检测、流量日志检测、系统安全等领域，希望对大家有所帮助~
  ☆167Oct 26, 2023Updated 2 years ago
• huyqngo / LMTracker

  View on GitHub
  The repository implement the LMTracker model based on paper: LMTracker: Lateral movement path detection based on heterogeneous graph embe…
  ☆17Jul 12, 2023Updated 2 years ago
• margoseltzer / shellshock-apt

  View on GitHub
  ☆14Mar 31, 2019Updated 6 years ago
• APT-Hunter / APTHunter

  View on GitHub
  ☆10Aug 27, 2022Updated 3 years ago
• li-zhenyuan / Knowledge-enhanced-Attack-Graph

  View on GitHub
  AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports
  ☆181Mar 23, 2023Updated 2 years ago
• CampanulaBells / PREM-GAD

  View on GitHub
  Code for IEEE ICDM 23 PREM: A Simple Yet Effective Approach for Node-Level Graph Anomaly Detection
  ☆13May 9, 2024Updated last year
• Thijsvanede / DeepCASE

  View on GitHub
  Original implementation and resources of DeepCASE as in the S&P '22 paper
  ☆98Aug 1, 2023Updated 2 years ago
• dhl123 / Airtag-2023

  View on GitHub
  ☆31Feb 6, 2025Updated last year
• PKU-ASAL / NoDrop

  View on GitHub
  ☆17Aug 30, 2024Updated last year
• JNUYoung / Provenance-Graph-for-Attack-Detection

  View on GitHub
  基于溯源图的入侵/威胁检测相关论文及阅读笔记
  ☆30Nov 30, 2023Updated 2 years ago