teler Real-time HTTP Intrusion Detection
attack monitor Endpoint detection & Malware analysis software
artillery The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
yurita Anomaly detection framework @ PayPal
crowdsec An open-source, lightweight agent to detect and respond to bad behaviours
tracee Linux Runtime Security and Forensics using eBPF
Attack Surface Analyzer analyze operating system’s security configuration for changes during software installation.
gixy Nginx 配置检查工具
dockerscan Docker security analysis & hacking tools
lynis Security auditing tool for Linux, macOS, and UNIX-based systems
ByteDance HIDS Cloud-Native Host-Based Intrusion Detection
panther Detect threats with log data and improve cloud security posture
APT Hunter Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
capa rules standard collection of rules for capa
AttackDetection Suricata PT Open Ruleset
DailyIOC IOC from articles, tweets for archives
ARTIF An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data
Gatekeeper <https://github.com/AltraMayor/gatekeeper>`_ open-source DDoS protection system