Hids GitHub Repositories

Daemon to ban hosts that cause multiple authentication errors

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

A Linux Host-based Intrusion Detection System based on eBPF.

A golang ebpf libary based on cilium/ebpf and datadog/ebpf.

Hades HIDS/HIPS for Windows

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

恶意IP全自动封禁平台。支持收集如下安全设备告警：长亭WAF社区版（SafeLine）、微步蜜罐HFish、奇安信天眼、奇安信椒图、绿盟WAF、天融信WAF、科来网络安全分析审计系统、深信服态势感知、启明星辰全网安全态势感知系统。支持如下设备联动封禁：RouterOS、OPNsense、CheckPoint、旁路阻断（无需设备配合）、BGP、奇安信防火墙、天融信防火墙、深信服防火墙。

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use.

GO开发而成，用于NIDS HIDS 分析的规则引擎，使用WorkerPool 高性能检测，支持多字段 "和" "或" 检测， 支持频率检测

Install open-source software from source to focus on Zero Trust Network principles, enhancing security for existing applications, and deploying tools for threat detection and prevention.

A HIDS (host-based intrusion detection system) for verifying the integrity of a system.

Windows CVE主防(HIPS/HIDS)

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

Scripts to deploy virtual testbed for log data analysis and anomaly detection.

A method for grouping, clustering, and merging semi-structured alerts

一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,

agent 部分使用go 开发而成，采用插件模式开发而成，配置部分以及agent存活使用etcd。

modular and extensible Kasane Teto based NIDS/HIDS (intrusion detection system)

ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems

🚨an osquery powered, almost cross platform HIDS

Some of my security-related coding projects for OpenBSD: A kernel-based user-profile intrusion detection system (FUPIDS) and an ICMP-based "port-knocking" service (openportd).

Ansible role for install and configure Wazuh manager on Linux operating system.