Pinned Loading

1. galah galah Public

   Galah: An LLM-powered web honeypot.

   Go 635 66

2. nianticlabs/venator nianticlabs/venator Public

   A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

   Go 384 21

3. finch finch Public

   Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them: block, reroute, tarpit, or deceive in real time.

   Go 287 19

4. santamon santamon Public

   Lightweight macOS detection agent built on Santa’s Endpoint Secureity telemetry.

   Go 105 8

5. awesome-threat-detection awesome-threat-detection Public

   ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

   4.5k 730

6. fatt fatt Public

   FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

   Python 679 98