Projects in Awesome Lists tagged with hids

https://github.com/fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors

anti-bot attack-prevention ban-hosts ban-management bsd fail2ban gplv2 hids ids intrusion-detection intrusion-prevention ips linux loganalyzer macos monitoring python security security-tools

Last synced: 14 May 2025

https://github.com/ossec/ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

compliance file-integrity-management fim hids intrusion-detection loganalyzer nist800-53 ossec pci-dss policy-monitoring security

Last synced: 13 May 2025

https://github.com/bytedance/elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

cwpp edr hids linux-security rasp security

Last synced: 14 May 2025

https://github.com/ysrc/yulong-hids-archived

[archived] 一款实验性质的主机入侵检测系统

hids intrusion-detection

Last synced: 14 Jan 2026

https://github.com/ysrc/yulong-hids

[archived] 一款实验性质的主机入侵检测系统

hids intrusion-detection

Last synced: 25 Mar 2025

https://github.com/bytedance/Elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

cwpp edr hids linux-security rasp security

Last synced: 30 Mar 2025

https://github.com/EBWi11/AgentSmith-HIDS

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

anti-rootkit connect-hook create-file-hook detect-porcess-injection dns-query-hook execve-hook hids intrusion-detection kprobes load-lkm-hook security

Last synced: 02 Apr 2025

https://github.com/gojue/ehids-agent

A Linux Host-based Intrusion Detection System based on eBPF.

ebpf ebpf-sec golang hids security-audit

Last synced: 05 Apr 2025

https://github.com/gojue/ebpfmanager

A golang ebpf libary based on cilium/ebpf and datadog/ebpf.

ebpf golang hids

Last synced: 08 Apr 2025

https://github.com/chriskalix/hades

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

agent ebpf ebpf-programs ebpf-sec golang hids libbpf linux netlink runtime-security rust security

Last synced: 24 May 2026

https://github.com/chriskaliX/Hades

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

agent ebpf ebpf-programs ebpf-sec golang hids libbpf linux netlink runtime-security rust security

Last synced: 11 Jul 2025

https://github.com/secaegis/secautoban

恶意IP全自动封禁平台。支持收集如下安全设备告警：长亭WAF社区版（SafeLine）、微步蜜罐HFish、奇安信天眼、奇安信椒图、绿盟WAF、科来网络安全分析审计系统。支持如下设备联动封禁：RouterOS、OPNsense、CheckPoint、旁路阻断（无需设备配合）、奇安信防火墙

docker firewall hids sec security security-tools waf web-security

Last synced: 16 May 2025

https://github.com/sec-report/secautoban

恶意IP全自动封禁平台。支持收集如下安全设备告警：长亭WAF社区版（SafeLine）、微步蜜罐HFish、奇安信天眼、奇安信椒图、绿盟WAF、科来网络安全分析审计系统。支持如下设备联动封禁：RouterOS、OPNsense、CheckPoint、旁路阻断（无需设备配合）、奇安信防火墙

docker firewall hids sec security security-tools waf web-security

Last synced: 12 Apr 2025

https://github.com/SecAegis/SecAutoBan

恶意IP全自动封禁平台。支持收集如下安全设备告警：长亭WAF社区版（SafeLine）、微步蜜罐HFish、奇安信天眼、奇安信椒图、绿盟WAF、科来网络安全分析审计系统。支持如下设备联动封禁：RouterOS、OPNsense、CheckPoint、奇安信防火墙、旁路阻断（无需设备配合）

docker firewall hids sec security security-tools waf web-security

Last synced: 07 Sep 2025

https://github.com/libellux/libellux-up-and-running

Install open-source software from source to focus on Zero Trust Network principles, enhancing security for existing applications, and deploying tools for threat detection and prevention.

access-control antivirus hids intrusion-detection intrusion-prevention logging monitoring security two-factor-authentication virtual-private-network vulnerability-assessment vulnerability-scanner zero-trust-network

Last synced: 12 Feb 2026

https://github.com/ait-aecid/logdata-anomaly-miner

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use.

anomaly anomaly-detection cybersecurity detection hids ids intrusion-detection linux log-analysis logdata logging python security

Last synced: 10 Apr 2025

https://github.com/cedricbonhomme/pyhids

A HIDS (host-based intrusion detection system) for verifying the integrity of a system.

bloom-filter hashlookup hids intrusion-detection irc misp python rsa-signature security yara

Last synced: 05 Apr 2025

https://github.com/ait-aecid/aecid-alert-aggregation

A method for grouping, clustering, and merging semi-structured alerts

alert-aggregation alerts clustering hids ids intrusion-detection json log-data logs machine-learning meta-alerts nids semi-structured similarity unsupervised

Last synced: 10 Sep 2025

https://github.com/ait-aecid/kyoushi-environment

Scripts to deploy virtual testbed for log data analysis and anomaly detection.

anomaly-detection cyber-attacks data-mining hids ids kyoushi log-data logs monitoring nids security simulation

Last synced: 20 Jan 2026

https://github.com/gsa/laptop-management

ALPHA/WIP for OSquery configuration for Mac and Linux Operating Systems

alpha fleet hids management osquery

Last synced: 15 May 2025

https://github.com/leonjza/golert

🚨an osquery powered, almost cross platform HIDS

hids monitoring osquery security

Last synced: 26 Jul 2025

https://github.com/goldstrike77/ansible-role-linux-wazuh

Ansible role for install and configure Wazuh manager on Linux operating system.

ansible ansible-role compliance file-integrity-management hids ids incident-response intrusion-detection log-analysis loganalyzer ossec pci-dss policy-monitoring security security-awareness security-hardening vulnerability-detection wazuh

Last synced: 05 May 2025

https://github.com/cdpxe/openbsdhacks

Some of my security-related coding projects for OpenBSD: A kernel-based user-profile intrusion detection system (FUPIDS) and an ICMP-based "port-knocking" service (openportd).

bsd fupids hids host-monitoring icmp ids information-security kernel kernel-module kernel-modules openbsd openbsd-community openbsd-ports openbsd-scripts port-knocking portknocking security security-hardening security-monitoring security-tools

Last synced: 23 Mar 2025

https://github.com/ait-aecid/rootkit-detection-ebpf-time-trace

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

anomaly anomaly-detection ebpf hids intrusion-detection kernel-tracing machine-learning rootkit-detection rootkits semi-supervised

Last synced: 10 Apr 2025

https://github.com/cgzones/ctguard

small hids

debian filesystem-changes-monitor hids intrusion-detection loganalyzer security

Last synced: 17 May 2026

https://github.com/cdpxe/kspids

A kernel-based IDS for Linux. KSPIDS monitors especially system calls.

anomaly-detection hids host-monitoring ids information-forensics information-security intrusion-detection kernel kernel-hardening kernel-module linux linux-hardening linux-kernel linux-kernel-module linux-security linux-security-module monitoring security-hardening security-tools user-monitoring

Last synced: 11 Feb 2026

https://github.com/githubfoam/zeek-sandbox

zeek network security monitoring NIDS HIDS

cyber-threat-intelligence digital-forensic-readiness digital-forensics-incident-response hids host-based intrusion-detection-system network-based network-security-monitoring nids pipeline zeek

Last synced: 30 Mar 2025

https://github.com/githubfoam/suricata-sandbox

network security monitoring NIDS HIDS CTI DFIR

artificial-intelligence cyber-threat-intelligence digital-forensic-readiness digital-forensics-incident-response hids host-based network-based network-security-monitoring nids

Last synced: 07 Jan 2026

https://github.com/dafneb/ansible-role-ubuntu24-aide

Ansible Role - Installation of AIDE on Ubuntu 24

aide ansible ansible-role hardening hids security ubuntu ubuntu-server

Last synced: 01 May 2026

https://github.com/duggytuxy/syswarden-freebsd

SysWarden-FreeBSD is an Enterprise-grade Hardened Host Intrusion Detection & Prevention System (HIDS - HIPS) designed for critical FreeBSD infrastructure.

abuseipdb-integration blocklists cybersecurity-tools docker-security fail2ban firewall freebsd hids hips malicious-ips pf security-tools syswarden wazuh wireguard