aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

Velocidex / velociraptor

Digging Deeper....

perplexityai / numbat

Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.

turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

HexLasso / FF-16-TUI

Interactive static pattern discovery tool to locate structures from frequent patterns