activecm/rita

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Malicious traffic detection system

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

🎯 A general-purpose protocol stack analysis and debugging tool based on eBPF 🧰

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Tools for hunting for threats.

A framework for secure and scalable network traffic analysis - https://netcap.io

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.