hids

Daemon to ban hosts that cause multiple authentication errors

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

[archived] 一款实验性质的主机入侵检测系统

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

A Linux Host-based Intrusion Detection System based on eBPF.

Hades is a Host-Based Intrusion Detection System based on both eBPF(kernel) and netlink/cn_proc(userspace).

A golang ebpf libary base on cilium/ebpf and datadog/ebpf.

Express security essentials deployment for Linux Servers

GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测

A HIDS (host-based intrusion detection system) for verifying the integrity of a system.

Libellux: Up & Running provides documentation on how-to install open-source software from source. The focus is Zero Trust Network to enhance the security for existing applications or install tools to detect and prevent threats.

ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems

使用 cgroups + etcd + kafka + netlink-connector 开发而成的hids的架构，agent 部分使用go 开发而成， 会把采集的数据写入到kafka里面，由后端的规则引擎（go开发而成）消费，配置部分以及agent存活使用etcd。

🚨an osquery powered, almost cross platform HIDS

small hids

Ansible role for install and configure Wazuh manager on Linux operating system.

Some of my security-related coding projects for OpenBSD: A kernel-based user-profile intrusion detection system (FUPIDS) and an ICMP-based "port-knocking" service (openportd).

Lightweight file integrity based - Host Intrusion Detection System (HIDS) built in pure Python3. Recursively enumerates directories, stores hashes of files, detects and logs file modifications.

A kernel-based IDS for Linux. KSPIDS monitors especially system calls.

An Ansible role that manages a host-based intrusion detection system.

zeek network security monitoring NIDS HIDS

A lightweight and simple HIDS (Host-based Intrusion Detection System) written in Bash

network security monitoring NIDS HIDS CTI DFIR

WeiShu is An open source HIDS.

Wazuh - Host and endpoint security

Wazuh - Puppet module

Wazuh - Project documentation

Wazuh - Tools for packages creation