intrusion-detection

SQL powered operating system instrumentation, monitoring, and analytics.

Daemon to ban hosts that cause multiple authentication errors

Malicious traffic detection system

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Wazuh - The Open Source Security Platform

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

A curated list of awesome threat detection and hunting resources

[archived] 一款实验性质的主机入侵检测系统

Real-time HTTP Intrusion Detection

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

A utility to safely generate malicious network traffic patterns and evaluate controls.

Anomaly Detection on Dynamic (time-evolving) Graphs in Real-time and Streaming manner. Detecting intrusions (DoS and DDoS attacks), frauds, fake rating anomalies.

WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

Network Intrusion Detection KDDCup '99', NSL-KDD and UNSW-NB15

Wazuh - Ruleset

psad: Intrusion Detection and Log Analysis with iptables

Wazuh - Docker containers

Wazuh - Kibana plugin

An Intrusion Detection System library loosely based on PHP IDS

Machine Learning for Computer Security

idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)

An All-In-One home intrusion detection system (IDS) solution for the Raspberry PI.

Streaming Anomaly Detection Framework in Python (Outlier Detection for Streaming Data)

Wazuh - Ansible playbook

A reasonably reliable traffic per application monitor

Blackbook of malware domains

A lightweight tool to score network traffic and flag anomalies

SIAC is an enterprise SIEM built on open-source technology.