wooluo/SSlogs

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

Real-time HTTP Intrusion Detection

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

Local-first threat hunting for the logs you already have: Zeek, Pi-hole, syslog or the systemd journal, CloudTrail. Every run names the technique behind each detector. No agent, no daemon, no black box - between grep and a SIEM.

A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts