Cybersecurity Blue Team
234 items from fabacab/awesome-cybersecurity-blueteam ★5,601
-
pfSense pfsense.org
Firewall and Router FreeBSD distribution.
-
OPNsense opnsense.org
is an open source, easy-to-use and easy-to-build FreeBSD based firewall and routing platform. OPNsense includes most of the features available in expensive commercial firewalls, and more in many cases. It brings the rich feature set of commercial offerings with the benefits of…
-
OpenVPN openvpn.net
OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that…
-
consul consul.io
Consul is a tool for service discovery, monitoring and configuration.
-
Tailscale tailscale.com
Mesh VPN for securely connecting devices, services, and users.
-
Falco falco.org
A cloud-native runtime security project used as a Kubernetes threat detection engine.
-
Cilium cilium.io
project (GitHub repository) is a technology relying on eBPF and XDP to provide "fast in-kernel networking and security policy enforcement for containers based on eBPF programs generated on the fly". Many presentations available (with overlap):
-
SpoofSpotter github.com
-
Helm GPG (GnuPG) Plugin github.com
-
python-dshield github.com
-
Zipkin zipkin.io
Distributed tracing system.
-
Zabbix zabbix.com
Open source enterprise-class monitoring solution.
-
SecureDrop securedrop.org
An open-source whistleblower submission system that media organizations and NGOs can install to securely accept documents from anonymous sources.
-
OpenTelemetry opentelemetry.io
High-quality, ubiquitous, and portable telemetry to enable effective observability.
-
Linkerd linkerd.io
Resilient service mesh for cloud native apps.
-
Jaeger jaegertracing.io
An open source, end-to-end distributed tracing
-
Istio istio.io
An open platform to connect, manage, and secure microservices.
-
Teleport goteleport.com
-
Gluu Server gluu.org
OpenID Connect Provider and FAPI certified solution and integrated with IAM.
-
DynamoRIO dynamorio.org
Runtime code manipulation system that supports code transformations on any part of a program, while it executes.
-
Dev-Sec.io dev-sec.io
The DevSec collection helps you harden your Linux Based OS as well as MySQL, NGINX and SSH Server/Services.
-
TheHive thehive-project.org
Scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.
-
Redline fireeye.com
Provides host investigative capabilities to users to find signs of malicious activity through memory and file analysis, and the development of a threat assessment profile.
-
peepdf eternal-todo.com
-
CAINE caine-live.net
CAINE is a Ubuntu-based app that offers a complete forensic environment that provides a graphical interface. This tool can be integrated into existing software tools as a module. It automatically extracts a timeline from RAM.
-
chkrootkit chkrootkit.org
-
Qubes OS qubes-os.org
Qubes OS is a free and open-source security-oriented operating system meant for single-user desktop computing.
-
Prelude prelude-siem.org
Prelude is a Universal "Security Information & Event Management" (SIEM) system. Prelude collects, normalizes, sorts, aggregates, correlates and reports all security-related events independently of the product brand or license giving rise to such events; Prelude is "agentless".
-
netsniff-ng netsniff-ng.org
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel…
-
MISP - Open Source Threat Intelligence Platform misp-project.org
MISP threat sharing platform is a free and open source software helping information sharing of threat intelligence including cyber security indicators. A threat intelligence platform for gathering, sharing, storing and correlating Indicators of Compromise of targeted attacks…
-
Gophish getgophish.com
An Open-Source Phishing Framework.
-
fwknop cipherdyne.org
Protects ports via Single Packet Authorization in your firewall.
-
OSSIM alienvault.com
OSSIM provides all of the features that a security professional needs from a SIEM offering – event collection, normalization, and correlation.
-
OSV-Scanner osv.dev
Vulnerability scanner written in Go which uses the data provided by OSV.dev. Developed by Google to scan dependencies across multiple languages and package managers for known vulnerabilities. Supports container scanning, license scanning, and guided remediation. Works with…
-
checkov checkov.io
Static analysis tool for Terraform files (tf>=v0.12), preventing cloud misconfigs at build time.
-
Locust locust.io
An open-source load testing tool. Define user behaviour with Python code, and swarm your system with millions of simultaneous users.
-
WireGuard wireguard.com
Fast, modern, and secure VPN tunnel.
-
tinc tinc-vpn.org
Secure mesh VPN software.
-
LuLu objective-see.com
LuLu is the free macOS firewall that aims to block unauthorized (outgoing) network traffic.
-
BlockBlock objective-see.com
Me: "Please alert me whenever anything is persistently installed." BlockBlock: "You got it"
-
Kata Containers katacontainers.io
Kata Containers is a new open source project building extremely lightweight virtual machines that seamlessly plug into the containers ecosystem.
-
Wazuh wazuh.com
-
Volatility volatilityfoundation.org
-
tcpreplay tcpreplay.appneta.com
-
PyREBox talosintelligence.com
-
Stratus Red Team stratus-red-team.cloud
-
Shuffle shuffler.io
-
Shufflecake shufflecake.net
-
Security Onion securityonionsolutions.com
-
CodeQL securitylab.github.com
- next page of items loading…
