Arkime
Scalable packet capture, indexed search, and network forensics.
Apache-2.0
Reviewed Oct 12, 2026
Reviewed project metadata and official links for red, blue, purple, and cross-team security work.
This is a dated, editorially reviewed seed. Links go to upstream projects or vendors. A listing is not authorization, safety certification, legal advice, or a recommendation to deploy a tool. Confirm scope, licensing, current maintenance, and your organization's rules before use.
Scalable packet capture, indexed search, and network forensics.
Apache-2.0
Reviewed Oct 12, 2026
Windows forensic artifact search and Sigma-backed threat hunting.
GPL-3.0
Reviewed Oct 12, 2026
OpenSearch-based security analytics, logging, detections, and hunting.
Apache-2.0
Reviewed Oct 12, 2026
SQL-like endpoint visibility for inventory, logging, and threat hunting.
BSD-style license in the canonical repository.
Reviewed Oct 12, 2026
Platform-neutral detection rule specification and reviewed rule corpus.
Detection Rule License 1.1 for rules; specification and logo are public domain.
Reviewed Oct 12, 2026
Endpoint collection, DFIR, incident response, and threat hunting platform.
AGPL-3.0
Reviewed Oct 12, 2026
Pattern-matching engine for malware analysis, hunting, and detection engineering.
BSD-3-Clause
Reviewed Oct 12, 2026
Network telemetry and protocol analysis for monitoring and threat hunting.
BSD license
Reviewed Oct 12, 2026