Tools for blue team

Open-source adversary emulation platform.

Manage threat intel at scale.

Visualize Windows logon events.

Simple IOC and YARA scanner.

Linux / macOS / Unix security auditor.

Threat intelligence sharing platform.

Automated adversary emulation.

Security automation across the compliance data lifecycle.

Microsoft Threat Intelligence in Python.

Forensic toolkit to detect signs of compromise on mobile devices.

Malicious-traffic detection system.

Open-source security data lake on AWS.

No-root Android + ESP32 Wi-Fi/BLE testing toolkit.

The classic network mapper and port scanner.

Open adversarial exposure validation.

Open cyber threat intelligence platform.

Decentralized, modular honeypot.

Sandboxed runtime that safely contains autonomous AI agents.

The scan engine behind Greenbone vulnerability management.

Evaluate IAM permissions in AWS.

C++ library for packet capture and crafting.

Active Directory health audit.

Open-source AI agent firewall for MCP and agent egress.

BloodHound reporting for defenders.