siem-integration

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your choice. Tagging, posture rules, and alerting built in.

Botnet Radar — host-level anomaly detection for defensive operators. Watches packet-rate spikes and distributed UDP patterns to surface early signs of botnet behavior and DDoS activity. Offense-driven defense. Built by Red Specter.

Honigtopf is a high-performance asynchronous multi-service HTTP & Telnet IoT deception framework. Mimes legacy software configurations, vulnerable IoT signatures, and device dashboard mirages to geolocate and capture threat reconnaissance telemetry via a sleek CustomTkinter GUI.

Plugin-driven framework for auditing AI model behavior across providers and deployment targets. Run the same backdoor scan against OpenAI, Anthropic, local PyTorch models, or HuggingFace without changing the scanner. Push findings to Splunk, Elastic, Datadog, or Sentinel.

Automatically downloads, parses, and synchronizes Sigma rules into various SIEM formats.

Policy-bound defensive security tool: ranks which exposure to harden first and proves why with sourced evidence; fixture-only validation, SIEM/ticket handoffs. Pure-Python core + React console.

PurpleForge is a FastAPI-based adversary simulation and threat‑intelligence platform that transforms red-team technique execution into collaborative exercises, measurable detection coverage, and executive-level risk reporting for multi‑tenant environments.

Advanced File Integrity Monitoring (FIM) system with real-time alerts, AI-powered analysis, SIEM integration, and comprehensive security monitoring.