Ids

CrowdSecGo

An open-source, participative security engine that detects and blocks malicious IPs using crowdsourced threat intelligence.

SigmaPython

A generic and open signature format for describing log event detections, shareable across SIEM systems.

Sigma RulesPython

A generic and open signature format for describing log event detections, shareable across SIEM systems.

Security Onion

A Linux distribution for threat hunting, enterprise security monitoring, and log management.

SELKSShell

A Linux distribution for network detection and response (NDR) built around Suricata, providing a complete NDR platform.