Pinned Loading

1. santamon santamon Public

   Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry.

   Go 113 8

2. galah galah Public

   Galah: An LLM-powered web honeypot.

   Go 649 68

3. nianticlabs/venator nianticlabs/venator Public

   A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

   Go 382 21

4. finch finch Public

   Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them: block, reroute, tarpit, or deceive in real time.

   Go 297 19

5. bumblebee bumblebee Public

   Forked from perplexityai/bumblebee

   Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

   Go 1

6. awesome-threat-detection awesome-threat-detection Public

   ✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

   4.6k 739