Tools for blue team

Medium-interaction SSH/Telnet honeypot.

Deep research agent for cloud and infrastructure security

MCP server exposing 66 dark-web threat-intelligence tools to AI.

Hunt PowerShell attacks in Windows logs.

Blocks destructive shell commands from AI coding agents

Automated detection lab environment.

Forensic artifact framework from Fox-IT.

Network forensic analysis framework.

SSH tarpit that wastes attacker time.

Windows ETW provider browser and trace inspector.

Malware analysis automation.

Fast Incident Response platform.

Ban hosts that fail auth too often.

Dynamic network analysis for malware.

Runtime security for containers.

Open vulnerability management platform.

Adversary tradecraft detection on Windows.

Osquery-powered device management.

Security advisories + PoCs from Google.

Open log management.

The Hunting ELK stack.

Local-first runtime security layer for AI agents.

Windows hardening for high-risk users.

Windows event log threat hunter.