intrusion-detection

SQL powered operating system instrumentation, monitoring, and analytics.

Daemon to ban hosts that cause multiple authentication errors

Wazuh - The Open Source Security Platform

Malicious traffic detection system

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

A curated list of awesome threat detection and hunting resources

Real-time HTTP Intrusion Detection

[archived] 一款实验性质的主机入侵检测系统

WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓

A utility to safely generate malicious network traffic patterns and evaluate controls.

Anomaly Detection on Dynamic (time-evolving) Graphs in Real-time and Streaming manner. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies.

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15

Monitor network traffic per executable using BPF

Wazuh - Docker containers

Wazuh - Ruleset

psad: Intrusion Detection and Log Analysis with iptables