HpfeedsHoneyGraph

LastActivityView

A tool that collects and displays user activity and system events on a Windows system.

Sysmon for Linux

Sysmon for Linux is a tool that monitors and logs system activity with advanced filtering to identify malicious activity.

Synthetic Adversarial Log Objects (SALO)

A framework for generating log events without the need for infrastructure, allowing for simple, repeatable, and randomized log event creation.

Alien Vault Ossim

AlienVault OSSIM provides an all-in-one security management solution with asset discovery, vulnerability assessment, and SIEM capabilities.

Matano Open Source Security Data Lake

Open source security data lake for AWS with real-time log normalization and Detection-as-Code capabilities.

ELAT (Event Log Analysis Tool)

ELAT (Event Log Analysis Tool) is a tool that helps in analyzing Windows event logs for malware detection.

Blauhaunt

A tool collection for filtering and visualizing logon events, designed for experienced DFIR specialists in threat hunting and incident response.

NodeSecure

Cybersecurity project for security monitoring of Node.js applications.

Log-Killer

Tool for deleting logs on Linux/Windows servers.