Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
-
Updated
Apr 16, 2021
Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
A Linux packet crafting tool.
Respounder detects presence of responder in the network.
An open standard for hashing network flows into identifiers, a.k.a "Community IDs".
Mapping NSM rules to MITRE ATT&CK
A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the necessary hardware and setup and finally provide some examples of how you can use the power of Zeek to have absolute control over your network.
A website and framework for testing NIDS detection
Real-time Packet Observation Tool
Highly customizable low-interaction experimental honeypot that mimics specific hosts.
Automation of VPC Traffic Mirror Sessions in AWS
基于Agent驱动的网络安全流量监控与分析平台,下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成,为护网行动增添一把利器。
Jxnet is a Java library for capturing and sending custom network packet buffers with no copies. Jxnet wraps a native packet capture library (libpcap/winpcap/npcap) via JNI (Java Native Interface).
A machine learning program, that detects denial of service attack using machine learning technique.
A Python implementation of the Community ID flow hashing standard
Go implementation of the Community ID flow hashing standard
A set of tools and procedures for automating NSM and NIDS deployments in AWS
This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server
Automate the deletion of AWS VPC Traffic Mirror Sessions
Overnight Hercules for Network Security: Become a Security Analyst book
A legal and educational tool for cybersecurity testing and ethical hacking.
Add a description, image, and links to the network-security-monitoring topic page so that developers can more easily learn about it.
To associate your repository with the network-security-monitoring topic, visit your repo's landing page and select "manage topics."