Open-Source Blue Team & Threat Detection
by @releaseport · 10 tools
Detect, correlate, and respond to intrusions — host-based SIEMs, network IDS, DFIR endpoint agents, log analyzers, deception traps, and community detection rules.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
Generates lightweight, embedded honeypot triggers called canary tokens for detecting unauthorized access.
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
