DCEPT (Domain Controller Enticing Password Tripwire) is a honeytoken-based tripwire for Microsoft Active Directory. Honeytokens are pieces of information intentionally littered on system so they can be discovered by an intruder. The honeytokens are credentials that would only be known by a someone extracting them from memory. A logon attempt using these faux credentials would mean someone was inside the network and is attempting privilege escalation to domain administrator.

DCEPT - A tool for deploying and detecting use of Active Directory honeytokens

Wazuh helps you to gain deeper security visibility into your infrastructure by monitoring hosts at an operating system and application level. This solution, based on lightweight multi-platform agents, provides the capabilities like Log management and analysis, File integrity monitoring, Intrusion and anomaly detection, Policy and compliance monitoring. 

Wazuh - Host and endpoint security

Apache Spot is a community-driven cybersecurity project, built from the ground up, to bring advanced analytics to all IT Telemetry data on an open, scalable platform. pot expedites threat detection, investigation, and remediation via machine learning and consolidates all enterprise security data into a comprehensive IT telemetry hub based on open data models.
<BR><BR>
Apache Spot uses the best tools just to provide the best functionality preventing attacks, identifying unknown threats, and providing cybersecurity. Perimeter Flows, DNS, Proxy and Internal Flows provide remarkable advantages creating fast and efficient data analysis.
<BR><BR>
 Apache Spot uses machine learning as a filter for separating bad traffic from benign and to characterize the unique behavior of network traffic. A proven process, of context enrichment, noise filtering, whitelisting and heuristics, is also applied to network data to produce a shortlist of most likely security threats. 

Apache Spot is a community-driven cybersecurity project, built from the ground up, to bring advanced analytics to all IT Telemetry data on an open, scalable platform. pot expedites threat detection, investigation, and remediation via machine learning and consolidates all enterprise security data into a comprehensive IT telemetry hub based on open data models.

Apache Spot - A Community Approach to Fighting Cyber Threats

Discover open source projects across all platforms

Projects

DCEPT - A tool for deploying and detecting use of Active Directory honeytokens

Wazuh - Host and endpoint security

Apache Spot - A Community Approach to Fighting Cyber Threats

TechStack

Tagcloud

License

Suggested keywords:

Projects

DCEPT - A tool for deploying and detecting use of Active Directory honeytokens

Wazuh - Host and endpoint security

Apache Spot - A Community Approach to Fighting Cyber Threats

TechStack

Tagcloud

License