Enterprise Security Data Pipeline Platform (SDPP) — Real-Time Threat Detection + Deeply Integrated LLM Agents
-
Updated
Jun 25, 2026 - Go
#
detection-engine
Here are 24 public repositories matching this topic...
Clickdetect - generic and no vendor lock-in threshold based detection
-
Updated
Jun 20, 2026 - Python
A document tagging library
-
Updated
May 2, 2026 - Rust
A learning-focused PE analysis engine with modular detectors, heuristic analysis, and HTML reporting.
static-analysis cybersecurity malware-analysis binary-analysis python-security security-research threat-detection cybersecurity-education pe-analysis reverse-engineering-tools cybersecurity-tools pe-parser detection-engine
-
Updated
May 19, 2026 - Python
Real-time container threat detection, automated defense, and forensic evidence collection.
-
Updated
Feb 14, 2026 - Java
Ferramenta CLI em Python para análise de logs de segurança com isolamento por projeto, detecção de ameaças via assinaturas regex e gerenciamento de IPs maliciosos.
log-analysis regex incident-response cybersecurity blue-team ip-blocking security-monitoring detection-engine security-logs
-
Updated
Dec 22, 2025 - Python
The open detection and remediation core behind Vallhund. Normalized telemetry in; findings, actor classification, coverage boundaries, and agent-ready remediation prompts out.
security typescript traffic-analysis agpl bot-detection ai-agents security-monitoring detection-engine
-
Updated
Jun 10, 2026 - TypeScript
Hybrid prompt-injection detection engine (regex · Sentinel v2 · LLM judge) — 95.1% PINT balanced accuracy. Detection core of TUP AIGSMP. Built at Apart Research Global South Hackathon 2026.
python benchmarking hackathon siem ai-safety jailbreak-detection huggingface global-south mitre-atlas ai-governance detection-engine prompt-injection llm-security llm-monitoring nvidia-nim apart-research owasp-llm sentinel-v2
-
Updated
Jun 24, 2026 - Jupyter Notebook
Machine Learning based Network Intrusion Detection System with real-time packet analysis and MERN dashboard.
-
Updated
Mar 20, 2026 - JavaScript
Modular Linux attack timeline detection engine with MITRE ATT&CK mapping and CI-backed test suite.
python encryption cybersecurity trending vulnerability kali-linux soc linux-security timeline-analysis blue-team mitre-attack threat-detection detetction detection-engine security-detection
-
Updated
Feb 22, 2026 - Python
Multi-platform threat detection pipeline with SIEM simulation (Linux, AIX, Unix, Cloud)
python linux security unix log-analysis cybersecurity siem aix soc cloudtrail devsecops security-engineering cloud-security blue-team threat-detection detection-engine
-
Updated
Mar 31, 2026 - Python
GUARDIUM is an intelligent Wazuh rule optimization framework designed to reduce false positives, improve alert accuracy, and assist SOC teams in maintaining high-quality SIEM detections. GUARDIUM combines rule analysis, threat context, and Large Language Models (LLMs) to automatically evaluate, explain, and optimize Wazuh rules.
log-analysis intrusion-detection siem wazuh blue-team security-monitoring blue-team-tool cybersecurity-tools llm detection-engine security-operations-center false-positive-reduction llm-security security-ai qwen2-5
-
Updated
Jan 21, 2026 - Python
AI-Powered SOC Threat Hunting Platform | Sysmon + Python Detection Engine + Machine Learning (Isolation Forest) + VirusTotal Enrichment + Flask Dashboard
python machine-learning cybersecurity sysmon threat-hunting siem soc virustotal ai-security detection-engine
-
Updated
Dec 16, 2025 - Python
SOC home lab using Elastic SIEM: endpoint logging, detections (KQL), and incident reports.
-
Updated
Mar 25, 2026
Python-based AI security detection platform — detects prompt injection, data exfiltration and unsafe agent actions across chat and agentic AI systems
python owasp cybersecurity soc security-automation devsecops anomaly-detection blue-team ai-security detection-engine prompt-injection llm-security
-
Updated
May 30, 2026 - Python
High-throughput DNS intelligence and domain behavior analysis framework for offensive security and threat research.
golang cyber offensive-security red-team network-security security-research phishing-detection reconnaisance dns-enum detection-engine fast-flux domain-intelligence malware-infr
-
Updated
Apr 7, 2026 - Go
Defensive SOC analytics toolkit for log normalization, detection rules, risk scoring, and HTML reports.
-
Updated
May 16, 2026 - Python
Local-first security log analyzer with detection rules and web UI
-
Updated
Apr 26, 2026 - Python
AIGSMP (SIEM for AI) for the LLM intelligence layer — hybrid detection engine (regex · classifier · LLM judge) mapped to OWASP LLM Top 10 & MITRE ATLAS. Ingest, detect, alert. No inline blocking.
python docker typescript nextjs siem observability ai-safety fastapi mitre-atlas ai-governance detection-engine prompt-injection llm-security llm-monitoring owasp-llm wazuh-inspired
-
Updated
Jun 24, 2026 - TypeScript
Defensive log triage CLI for suspicious authentication, firewall, DNS, and outbound traffic patterns.
-
Updated
May 17, 2026 - Python
Improve this page
Add a description, image, and links to the detection-engine topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the detection-engine topic, visit your repo's landing page and select "manage topics."