LogRhythm NetMon is a network traffic analytics tool that provides real-time visibility, automated threat detection, and investigation capabilities for organizational networks.
#threat-detection tools
64 results · page 2
LogRhythm SIEM is a comprehensive security information and event management platform that collects, analyzes, and responds to security events across an organization's IT infrastructure.
Repository of automatically generated YARA rules from Malpedia's YARA-Signator with detailed statistics.
An Open-source intelligence (OSINT) honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers.
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
A crawler-based low-interaction client honeypot for exposing website threats.
A threat intelligence platform that monitors, analyzes, and provides detailed information about threat actors targeting non-human identities across various industries.
A security operations platform that provides automated threat detection, access control, and protection against various online attacks through Cloudflare integration.
High-performance remote packet capture and collection tool used for forensic analysis in cloud workloads.
Collects and organizes Linux OS data for detailed analysis and incident response.
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
PolySwarm is a malware intelligence marketplace that aggregates threat detection engines to provide early detection, unique samples, and higher accuracy.
A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.
Official repository of YARA rules for threat detection and hunting
A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.
Sigma is a generic and open signature format for SIEM systems and other security tools to detect and respond to threats.
Platform for searching, monitoring, and analyzing machine-generated big data via a web-style interface
Access a repository of Analytic Stories and security guides mapped to industry frameworks, with Splunk searches, machine learning algorithms, and playbooks for threat detection and response.
Real-time, container-based file scanning system for threat hunting and incident response.
A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing, utilizing Message Query Language (MQL) for behavior description.
Open-source rules for detecting and preventing email attacks like BEC, malware, and credential phishing.
Open source network threat detection engine capable of real-time intrusion detection, inline intrusion prevention and network security monitoring
Container and cloud security platform with runtime protection
A cloud-native application protection platform that provides comprehensive security monitoring, vulnerability management, and threat detection for cloud environments and container workloads.
Load more tools
Showing 48 of 64