πŸ“ˆ GH Trending Explorer 🎲 Surprise me

Search: siem Β· clear

Karib0u / rustinel

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

β–² ~28/7d β˜… 512 Rust 2d ago
frangoteam / FUXA

Web-based Process Visualization (SCADA/HMI/Dashboard) software

β–² ~21/7d β˜… 5.2k TypeScript today
bdg9412 / artex-ko-plus

ARTEX ν•œκ΅­μ–΄νŒ Β·AI 기반 침해사고 λŒ€μ‘ κΈ°λŠ₯ μΆ”κ°€ (upstream: Autumn-27/ARTEX, AGPL-3.0)

β–² ~21/7d β˜… 213 Go today
wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

β–² ~14/7d β˜… 17k C++ today
scadastrangelove / awesome-ai-security-tools

A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity β€” autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

β–² ~14/7d β˜… 1.7k Python today
Azure / Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

β–² ~7/7d β˜… 6.2k Python today
beenuar / AiSOC

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

β–² ~7/7d β˜… 2.7k Python today
cyb3rxp / awesome-soc

A curated knowledge base to build, run and mature a SOC (including CSIRT).

β–² ~7/7d β˜… 1.9k 1d ago
tenzir / tenzir

Tenzir is the data pipeline engine for security teams.

β–² ~7/7d β˜… 766 C++ today
Cai-aa / CAD-Agent-Hub

MCP servers and automation bridges for CATIA, SolidWorks, Siemens NX, and Autodesk Fusion

β–² ~7/7d β˜… 109 Python 1mo ago
msiemens / tinydb

TinyDB is a lightweight document oriented database optimized for your happiness :)

β–² ~0/7d β˜… 7.6k Python 6d ago
outflanknl / RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

β–² ~0/7d β˜… 2.7k Python 11d ago
sherifabdlnaby / elastdocker

🐳 Elastic Stack (ELK) v9+ on Docker with Compose. Pre-configured out of the box to enable Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command.

β–² ~0/7d β˜… 2.1k Dockerfile 26d ago
apache / plc4x

PLC4X The Industrial IoT adapter

β–² ~0/7d β˜… 1.8k Java 1d ago
emqx / neuron

Open source industrial connectivity server

β–² ~0/7d β˜… 1.4k C 24d ago
pfelk / pfelk

pfSense/OPNsense + Elastic Stack

β–² ~0/7d β˜… 1.2k Shell 20d ago
FunnyWolf / agentic-soc-platform

Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)

β–² ~0/7d β˜… 1.2k Python 23d ago
siemens / ros-sharp

ROS# is a set of open source software libraries and tools in C# for communicating with ROS from .NET applications, in particular Unity3D

β–² ~0/7d β˜… 1.2k C# 12d ago
jaegeral / security-apis

A collective list of public APIs for use in security. Contributions welcome

β–² ~0/7d β˜… 999 21d ago
gijzelaerr / python-snap7

a pure Python S7 communication library for interfacing with Siemens S7 PLCs

β–² ~0/7d β˜… 862 Python 1d ago
TonyPhipps / SIEM

SIEM Tactics, Techiques, and Procedures

β–² ~0/7d β˜… 734 PowerShell 28d ago
hn / bsh-home-appliances

BSH Bosch Siemens home appliances reverse engineering: D-Bus, washing machine, dryer electronics

β–² ~0/7d β˜… 619 C++ 19d ago
siemens / kas

Setup tool for bitbake based projects

β–² ~0/7d β˜… 609 Python 6d ago
utmstack / UTMStack

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

β–² ~0/7d β˜… 590 TypeScript today
Sadpainy / Stuxnet

Stuxnet - a super-factory virus discovered in 2010, exploited multiple vulnerabilities and modules. Here reproduced by me. Set work on Windows 7 and Windows XP.

β–² ~0/7d β˜… 589 C 5d ago
turbot / tailpipe

select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.

β–² ~0/7d β˜… 581 Go today
GACWR / OpenUBA

A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [BETA]

β–² ~0/7d β˜… 522 Python 4d ago
lenny-ts / caddy-analyzer

Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2

β–² ~0/7d β˜… 44 Go 2d ago
M-med / Active-Directory-Simulation-Attack-

A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.

β–² ~0/7d β˜… 38 PowerShell 14d ago
mahialjaber / SOC-Log-Analysis-Datasets

Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIEM ingestion, threat hunting, and log analysis.

β–² ~0/7d β˜… 34 today
dotdna-io / assetatlas

Open-source asset inventory β€” turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your choice. Tagging, posture rules, and alerting built in.

β–² ~0/7d β˜… 31 Python 23d ago