dtrace for linux - kernel driver and userland tools

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digi…

A forensic evidence collection & analysis toolkit for OS X

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.