Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
23 matching repositories for “log analysis”.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
apt-attacksforensic-analysisincident-responsepurpleteampython3threat-huntingwindows-event-logswindows-eventlog
Source: GitHub repository metadata.
Load Windows Event Log (.evtx) files into Elasticsearch, or export them as JSON lines. Born on an offline threat hunt; rebuilt for Elasticsearch 9.
blue-teamdfirelasticsearchevtxforensicsincident-responselog-analysispython
Source: GitHub repository metadata.
Cross-file security-audit agent skill — source→sink taint across files, supply-chain CVE audit via 18 scanners (vendored package-checker, npm/pnpm/yarn audit, grype, trivy, osv-scanner… + Syft SBOM), blue-team log forensics, EPSS/KEV risk ranking, adversarially verified findings in a cited report.
agent-skillai-agentappsecclaudecode-auditdependency-scanningdevsecopslog-analysis
Source: GitHub repository metadata.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
compliancecontinuous-deliverycve-scanningcybersecuritydependency-analysisdevsecopsgdprlog4shell
Source: GitHub repository metadata.
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
cmmccompliancehipaaincident-responselog-analysislog-parsingmalware-detectionsecurity
Source: GitHub repository metadata.
select * from logs; Tailpipe is an open source SIEM for instant log insights, powered by DuckDB. Analyze millions of events in seconds, right from your terminal.
awsazuredetectionsdevopsduckdbforensicsgcpincident-response
Source: GitHub repository metadata.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
anomaly-detectionbeaconsblue-teamc2c2-detectioncommand-and-controlcyber-securityincident-response
Source: GitHub repository metadata.
Forensic AST scanner that detects deliberate obfuscation, hidden logic and payloads smuggled in non-code files
astclicode-analysisdependency-scanningdevsecopsentropy-analysisgithub-actionsmalware-detection
Source: GitHub repository metadata.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
arkimecybersecurityinfosecnetwork-securitynetwork-traffic-analysisnetworksecuritynetworktrafficanalysisopensearch
Source: GitHub repository metadata.
Schema-aware secret scanner for cloud logs with regex filtering, Shannon entropy analysis, and JSON structural tracking.
awsclicloud-securitycloudtrailcredentialsdevsecopsentropyhacktoberfest
Source: GitHub repository metadata.
Cross-platform incident response and live forensic artifact collector with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.
bashciscoeventlog-analysiseventlogsforensicatorforensicsforensics-investigationsincident-response
Source: GitHub repository metadata.
Offline desktop forensic triage tool. Flags images likely to contain nudity (NudeNet) and finds a person of interest from reference photos (OpenCV YuNet/SFace), with adjustable thresholds and session logs. For authorized investigators; all results need human review.
dfirdigital-forensicsface-recognitionforensicsimage-analysisnudity-detectionopencvpyqt5
Source: GitHub repository metadata.
Autonomous DFIR agent: point it at disk images, memory dumps or log exports and get back an investigation that shows its work. Volatility 3, Plaso, YARA and any OpenAI-compatible LLM.
ai-agentai-forensicscybersecuritydfirdigital-forensicsforensicsincident-responsellm-agent
Source: GitHub repository metadata.
A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts
analysiscyber-crimedfirforensicsgraphincident-responseinvestigationsecurity
Source: GitHub repository metadata.
Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android backups. Parse and view ABX, SQLite, SEGB, (B)PLIST, REALM, Protobuf, MMKV, Logs, hex, JSON, XML, images, audio/video, PDF, and more — all in one GUI.
abxandroid-forensicsbplistdfirdigital-forensicsforensicsios-forensicsleveldb
Source: GitHub repository metadata.
Windows应急响应工具---Hawkeye(鹰眼)。集Windows日志分析，进程扫描，主机信息于一体的综合应急响应分析工具
cyber-securitydfiremergency-responsegolangguiincident-responselog-analysissoc
Source: GitHub repository metadata.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-securitycomplianceconfiguration-assessementcontainer-securitycybersecurityfile-integrity-monitoringincident-responseinfosec
Source: GitHub repository metadata.
Wazuh - Ansible playbook
ansiblecomplianceelasticsearchfile-integrity-managementhacktoberfesthacktoberfest-acceptedidsincident-response
Source: GitHub repository metadata.
Plugins for Wazuh Dashboard
compliancefile-integrity-managementgdpridsincident-responseintrusion-detectionlog-analysisloganalyzer
Source: GitHub repository metadata.
Wazuh - Docker containers
compliancedockerelasticsearchfile-integrity-managementhacktoberfesthacktoberfest-acceptedidsincident-response
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.