Tools

Generates lightweight, embedded honeypot triggers called canary tokens for detecting unauthorized access.

tirreno is an open-source security framework. Event tracking, threat detection, and risk scoring for any application.

Web-based Traffic and Security Network Traffic Monitoring

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

A framework for secure and scalable network traffic analysis - https://netcap.io