siem-integration

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your choice. Tagging, posture rules, and alerting built in.

Botnet Radar — host-level anomaly detection for defensive operators. Watches packet-rate spikes and distributed UDP patterns to surface early signs of botnet behavior and DDoS activity. Offense-driven defense. Built by Red Specter.

Automatically downloads, parses, and synchronizes Sigma rules into various SIEM formats.

Plugin-driven framework for auditing AI model behavior across providers and deployment targets. Run the same backdoor scan against OpenAI, Anthropic, local PyTorch models, or HuggingFace without changing the scanner. Push findings to Splunk, Elastic, Datadog, or Sentinel.

Policy-bound defensive security tool: ranks which exposure to harden first and proves why with sourced evidence; fixture-only validation, SIEM/ticket handoffs. Pure-Python core + React console.

Advanced File Integrity Monitoring (FIM) system with real-time alerts, AI-powered analysis, SIEM integration, and comprehensive security monitoring.

PurpleForge is a FastAPI-based adversary simulation and threat‑intelligence platform that transforms red-team technique execution into collaborative exercises, measurable detection coverage, and executive-level risk reporting for multi‑tenant environments.