Tools that monitor

Zero-trust access for SSH, K8s and more.

eBPF-based runtime security.

Open-source SIRP for incident response.

Open-source cloud-native protection platform.

Honeytoken tripwire for the Shai-Hulud npm worm.

Unix-like artifact collector.

Zero-install cross-platform incident response and DFIR toolkit.

Endpoint visibility and DFIR.

Open-source EDR for Windows.

Open-source XDR and SIEM.

Pattern matching for malware research.

Community YARA rule repository.

Network analysis framework.

SQL-powered endpoint visibility.

Spy on Linux processes without root.

Easy SSH honeypot.

Transparent SSH bastion.

Modular Sysmon configuration repo.