network-security-monitoring

There are 5 repositories under network-security-monitoring topic.

Security-Onion-Solutions / security-onion
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
intrusion-detection network-security-monitoring log-management ids nsm hunting dfir
3057
rafael-santiago / pig
A Linux packet crafting tool.
packet-crafting networking hacking-tool intrusion-prevention forensics network-analysis network-security-monitoring denial-of-service hacking network-protocols network-test arp-spoofing
Language:C 459
codeexpress / respounder
Respounder detects presence of responder in the network.
responder golang network-security-monitoring network-security hackers llmnr computer-security blue-team attack-prevention attack-defense
Language:Go 311
corelight / community-id-spec
An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
flow-hashing network-monitoring network-security network-flow network-security-monitoring community-id
Language:Python 162
0xtf / nsm-attack
Mapping NSM rules to MITRE ATT&CK
mitre-attack network-security-monitoring nsm suricata suricata-rules threat-intelligence
69
mytechnotalent / Zeek-Network-Security-Monitor
A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.
zeek bro network-security cybersecurity cyber-security cyber cyber-threat-intelligence cyber-security-team pcap network-traffic network-analysis network-monitoring network zeek-instance lesson conn network-security-monitoring hacking hack
Language:Zeek 58
testmynids.org
0xtf / testmynids.org
A website and framework for testing NIDS detection
network-security network-monitoring suricata network-security-monitoring snort emergingthreats nids
Language:Shell 56
tatsuiman / rpot2
Real-time Packet Observation Tool
intelligence threat-hunting pcap-analyzer elk big-data-analytics virtualization network-security-monitoring malware-research yara
Language:Bro 39
AWS-AutoMirror
3CORESec / AWS-AutoMirror
Automation of VPC Traffic Mirror Sessions in AWS
aws aws-lambda network-security-monitoring aws-security aws-security-automation
Language:JavaScript 33
edoardottt / boggart
Highly customizable low-interaction experimental honeypot that mimics specific hosts.
honeypot honeypots blue-team defense defensive-security network security cyber-defense honeypot-http network-analysis network-security web-security brute-force dos-attack hacktoberfest log-analysis security-tools attack-detection network-security-monitoring
Language:Go 27
jxnet / Jxnet
Jxnet is a Java library for capturing and sending custom network packet buffers with no copies. Jxnet wraps a native packet capture library (libpcap/winpcap/npcap) via JNI (Java Native Interface).
packet-capture packet-sniffer libpcap npcap winpcap java pcap-library sending-packets capture-packets jni packet-crafting packet-analyzer security security-scanner security-audit network-security network-security-monitoring
Language:Java 26
corelight / pycommunityid
A Python implementation of the Community ID flow hashing standard
flow-hashing network-monitoring network-security network-security-monitoring community-id
Language:Python 24
alonecoder1337 / Dos-Attack-Detection-using-Machine-Learning
A machine learning program, that detects denial of service attack using machine learning technique.
machine-learning python scikit-learn decision-trees denial-of-service network-security-monitoring
Language:Python 22
satta / gommunityid
Go implementation of the Community ID flow hashing standard
flow-hashing network-monitoring network-security network-security-monitoring community-id suricata zeek bro go golang
Language:Go 18
AWS-Mirror-Toolkit
3CORESec / AWS-Mirror-Toolkit
A set of tools and procedures for automating NSM and NIDS deployments in AWS
aws aws-lambda network-security-monitoring aws-security aws-security-automation
16
Truvis / Splunk_TA_Truvis_Suricata5
This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server
splunk splunk-application splunk-addon splunk-security siem suricata security security-dashboard security-monitoring security-alerts network-security network-security-monitoring splunk-alerts splunk-http splunk-enterprise splunk-searches splunk-universal-forwarder splunk-hec splunk-impact-cloud splunk-sdk
14
imsiddhant / Palo-Alto-Networks-Cybersecurity-Specialization
This repository shows all the hands on experience on Palo Alto Firewall, assignment and projects I have done in My Palo Alto Specialization Journey.
palo-alto-firewall networksecurity network-security-monitoring network-security firewall-configuration firewall threat-analyzer palo-alto-networks
6
0snap / broker-application-templates
Templates for writing applications using Zeek NSM communication library Broker
broker examples templates intrusion-detection-system zeek zeek-ids nsm network-security-monitoring
Language:Python 5
diveyez / fw.sh
Linux Network Defense Scripting (BASH)
blacklists ddos-mitigation ddos-protection firewall-rules netsec-tools network-security network-security-monitoring offsec
Language:Shell 5
AWS-TMS-Remover
3CORESec / AWS-TMS-Remover
Automate the deletion of AWS VPC Traffic Mirror Sessions
aws network-security-monitoring aws-security python-script
Language:Python 3
vrikodar / Wizard
A Full Fledged iptables Firewall automation framework For Linux with Log monitoring..
firewall-rules linux-firewall blockip firewall-management firewall-configuration firewalls iptables-firewall iptables-configuration iptables-rules netfilter-queue netfilter-persistent firewall linux-security network-security-monitoring network-security
Language:Shell 3
githubfoam / zeek-sandbox
zeek network security monitoring NIDS HIDS
zeek network-security-monitoring host-based intrusion-detection-system hids nids network-based digital-forensics-incident-response digital-forensic-readiness cyber-threat-intelligence pipeline
Language:Ruby 2
jsutch / RITA_Scripts
Scripts and Notebooks for doing IDS analysis of Zeek/RITA outputs
network-security-monitoring zeek rita jupyter-notebook security-tools ids nids c2 beacons blue-team threat-hunting threat-intelligence
Language:Jupyter Notebook 2
AWS-Config-MirrorSession
3CORESec / AWS-Config-MirrorSession
Check compliance of EC2 instances for session mirroring
aws aws-lambda aws-config aws-config-rules aws-security network-security-monitoring aws-security-automation
Language:JavaScript 1
adkauf / nmap-mon
Automated monitoring and alerting for network changes
network-security-monitoring nmap
Language:Shell 1
ArcticDev78 / netsploit-py
Use nmap and other network tools easily and efficiently
device-info network network-scanner network-security network-security-monitoring network-statistics networking networking-in-python nmap python
Language:Python 1
githubfoam / suricata-sandbox
network security monitoring NIDS HIDS CTI DFIR
network-security-monitoring nids hids host-based network-based artificial-intelligence digital-forensics-incident-response digital-forensic-readiness cyber-threat-intelligence
1
tristanluther28 / network_security_project
ECE 478 Client Fingerprinting Techniques
network-security network-security-monitoring
Language:PHP 1
7elmie / CCNA-3-Lab-S-4-U
This a Full CCNA 3 Lab'S Ans From the Start To the End and More Can You Comment in that or edit to more since or information about that field or any update or upgrade about that Lab'S
answers lab labs network network-analysis network-programming network-programming-lab network-security network-security-monitoring networking pkt pkt-files
0
atw31337 / artemis-distributed
Artemis Network Traffic Virus Monitor - Distributed Deployment Edition
virus-scanning network-security network-security-monitoring virus-detection malware-detection
Language:Shell 0
decompile / community-id-dotnet-core
A C# .net core implementation of the Community ID flow hashing standard
network-flow network-monitoring network-security-monitoring network-secuirty flow-hashing community-id
Language:C# 0
lanl / rhelhostinfo
Use the host-as-sensor model to enumerate security-relevant information about a RHEL host and the surrounding network, identifying and reporting changes via syslog. Written in python3.
python3 cybersecurity information-security redhat-enterprise-linux redhat7 redhat8 continuous-monitoring host-discovery host-monitoring network-security network-security-monitoring security
Language:Python 0
githubfoam / k8s-ebpf-sandbox
kubernetes ebpf
kubernetes ebpf network-security-monitoring network-observability pipeline
Language:Shell
githubfoam / openvas-sandbox
openvas network security monitoring NIDS HIDS
openvas nids hids vulnerability-scanners vulnerability-detection network-security-monitoring
Language:Jinja
VotSec-io / VoltSec.io-Network-Protection
VoltSec.io Network Protection is a project aimed at providing network security and firewall functionalities to protect your network from unauthorized access and malicious activities.
network-security golang network-security-monitoring
Language:Go
wahaj / Snort-IDS
A detailed basic setup config for the GNS3 Virtual Machine. This config aims to setup a software-based Intrusion Detection System with the highly popular software IDS "Snort"
gns3 vm intrusion-detection-system snort network-security-monitoring

network-security-monitoring

Security-Onion-Solutions / security-onion

rafael-santiago / pig

codeexpress / respounder

corelight / community-id-spec

0xtf / nsm-attack

mytechnotalent / Zeek-Network-Security-Monitor

0xtf / testmynids.org

tatsuiman / rpot2

3CORESec / AWS-AutoMirror

edoardottt / boggart

jxnet / Jxnet

corelight / pycommunityid

alonecoder1337 / Dos-Attack-Detection-using-Machine-Learning

satta / gommunityid

3CORESec / AWS-Mirror-Toolkit

Truvis / Splunk_TA_Truvis_Suricata5

imsiddhant / Palo-Alto-Networks-Cybersecurity-Specialization

0snap / broker-application-templates

diveyez / fw.sh

3CORESec / AWS-TMS-Remover

vrikodar / Wizard

githubfoam / zeek-sandbox

jsutch / RITA_Scripts

3CORESec / AWS-Config-MirrorSession

adkauf / nmap-mon

ArcticDev78 / netsploit-py

githubfoam / suricata-sandbox

tristanluther28 / network_security_project

7elmie / CCNA-3-Lab-S-4-U

atw31337 / artemis-distributed

decompile / community-id-dotnet-core

lanl / rhelhostinfo

githubfoam / k8s-ebpf-sandbox

githubfoam / openvas-sandbox

VotSec-io / VoltSec.io-Network-Protection

wahaj / Snort-IDS