pauldokas

headscale

An open source, self-hosted implementation of the Tailscale control server

bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

great_expectations

Always know what to expect from your data.

benthos

Fancy stream processing made operationally mundane

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

jocko

Kafka implemented in Golang with built-in coordination (No ZK dep, single binary install, Cloud Native)

GOAD

game of active directory

skydive

An open source real-time network topology and protocols analyzer

tracker-radar

Data set of top third party web domains with rich metadata about them

AttackDetection

Attack Detection

security_content

Splunk Security Content

clp

Compressed Log Processor (CLP) is a free log management tool capable of compressing text logs and searching the compressed logs without decompression.

ocsf-schema

OCSF Schema

packetStrider

A network packet forensics tool for SSH

sshimpanzee

SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)

dohot

DoHoT: making practical use of DNS over HTTPS over Tor

LogSlash

A standard for reducing log volume without sacrificing analytical capability

pCraft

pCraft is a PCAP Crafter, which creates a PCAP from an AMI scenario.

WonkaVision

fiber

l3af-arch

L3AF Architecture Documentation and Discussion

ct-samples

Sample files for Control Things Platform

Malcolm-PCAP

A set of PCAPs used to test the parsers used by Malcolm. Also, a curated list of PCAP collections I've found online.

kyd

DHCP Fingerprinting

gait

Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies

dynamic_dns_lists

Lists of Dynamic DNS Domains/FQDNs as well as lists of services/providers that offer free dynamic dns domains.

spicy-postgresql

spicy-quic

A Spicy analyzer for the QUIC protocol

zeek-goose-spicy