Threat Detection
Showing 21 of 129 projects
A low-interaction honeypot that mimics a PostgreSQL server to detect and log unauthorized connection attempts.
A modular, medium-interaction honeypot built with Python and Twisted for detecting and analyzing cyber attacks.
A honeypot that mimics the TCP 32764 router backdoor to detect and log exploitation attempts.
A portable PEiD implementation using YARA rules for malware analysis without requiring YARA installation.
A visualization application for analyzing and displaying hpfeeds honeypot log data in graphical form.
An open-source 4D spatiotemporal AI platform built on PostgreSQL, PostGIS, TimescaleDB, H3, and pgvector for unified geospatial and time-series data analysis.
A collection of open-source threat detection rules for Snort, Sigma, and Yara security tools.
A lightweight honeypot for analyzing network attacks with configurable services and LEEF-compliant logging.
A Docker-deployed honeypot that detects port scanning attempts by exposing fake services.
Automatically converts Sigma detection rules to Kusto Query Language (KQL) for Microsoft Defender and Sentinel.
A Docker-based training environment for learning Suricata network intrusion detection through hands-on PCAP replay.
Ansible playbook for automatically deploying the Bifrozt honeypot system.
A REST API honeypot that logs malicious API requests to detect and analyze attacks.
A software-defined networking honeypot that captures and analyzes malicious traffic by simulating vulnerable network services.
A honeypot for detecting and analyzing unauthorized access attempts.
A free URL security scanner that performs 8 comprehensive checks and AI analysis to detect red flags before connecting to apps.
A curated set of Suricata intrusion detection and prevention system (IDPS) rules published by QuadrantSec.
A low-interaction honeypot designed to detect and analyze network attacks with minimal resource usage.
Enterprise-grade intrusion detection system integrating Suricata IDS directly into servers for deep network visibility and threat detection.
A Python library for malware file analysis that extracts metadata, performs static analysis, and detects macros across multiple file formats.
A simple web tool to scan files against YARA rules for detecting suspicious indicators.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.