rabbitstack/fibratus

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Open EDR public repository

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Cloud Native Runtime Security

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Rapidly Search and Hunt through Windows Forensic Artefacts

Linux Runtime Security and Forensics using eBPF

Elastic Security detection content for Endpoint

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.