Network defense tools

Tools

CHIRON ELK (network analytics and threat detection)

network analysis, network security monitoring, network traffic analysis, threat discovery

CHIRON is a tool to provide network analytics based on the ELK stack. It is combined with Machine Learning threat detection using the Aktaion framework. Typical usage of the tool is home use and get the visibility of home internet devices. By leveraging the Aktaion framework, it helps with detection threats like ransomware, phishing, or other malicious traffic.

SCUTUM (ARP filtering)

firewall management, network traffic filtering

The primary goal of this solution is to prevent ARP spoofing by other computers on the local network. It uses a whitelist and blocks all other systems sending possible malicious ARP requests (e.g. with spoofing attack).

Missing a favorite tool in this list? Share a tool suggestion and we will review it.