Skip to content
@ait-aecid

AECID

Automatic Event Correlation for Incident Detection

Pinned Loading

  1. logdata-anomaly-miner logdata-anomaly-miner Public

    This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitab…

    Python 93 22

  2. anomaly-detection-log-datasets anomaly-detection-log-datasets Public

    Analysis scripts for log data sets used in anomaly detection.

    Python 85 17

  3. alert-data-set alert-data-set Public

    Scripts to generate and analyze the AIT alert data set (AIT-ADS)

    Python 36 1

  4. aecid-alert-aggregation aecid-alert-aggregation Public

    A method for grouping, clustering, and merging semi-structured alerts

    Python 28 7

  5. caraxes caraxes Public

    Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.

    C 51 4

  6. kyoushi-environment kyoushi-environment Public

    Scripts to deploy virtual testbed for log data analysis and anomaly detection.

    Jinja 28 5

Repositories

Showing 10 of 44 repositories
  • logdata-anomaly-miner Public

    This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use.

    ait-aecid/logdata-anomaly-miner's past year of commit activity
    Python 93 GPL-3.0 22 13 3 Updated Aug 26, 2026
  • rootkit-detection-ebpf-time-trace Public

    Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

    ait-aecid/rootkit-detection-ebpf-time-trace's past year of commit activity
    Python 30 GPL-3.0 3 0 0 Updated Aug 21, 2026
  • caraxes Public

    Academic research rootkit using ftrace-hooking to hide files and processes via magic word or user/group. Tested until Linux 6.11.

    ait-aecid/caraxes's past year of commit activity
    C 51 GPL-3.0 4 2 0 Updated Aug 21, 2026
  • llm-user-shell-sim Public

    user behavior simulation for shell-based access using LLMs

    ait-aecid/llm-user-shell-sim's past year of commit activity
    Python 0 0 0 0 Updated Aug 13, 2026
  • attack-manifestations-interpretation Public

    Scripts to analyze the CAM-LDS using LLMs

    ait-aecid/attack-manifestations-interpretation's past year of commit activity
    Python 5 GPL-3.0 1 0 0 Updated Jul 17, 2026
  • alert-data-set Public

    Scripts to generate and analyze the AIT alert data set (AIT-ADS)

    ait-aecid/alert-data-set's past year of commit activity
    Python 36 GPL-3.0 1 1 0 Updated Jun 17, 2026
  • log_parsing_benchmark Public

    A repository for benchmarking log parsers in different operational settings.

    ait-aecid/log_parsing_benchmark's past year of commit activity
    Python 0 GPL-3.0 0 0 0 Updated Jun 5, 2026
  • log-interpretation-prompt-injection Public

    Adversarial prompt injection into system log data (audit, access logs) to influence LLM-based log interpretation tasks

    ait-aecid/log-interpretation-prompt-injection's past year of commit activity
    Python 2 0 0 0 Updated Jun 1, 2026
  • aminer-rest Public

    REST-API for the logdata-anomaly-miner

    ait-aecid/aminer-rest's past year of commit activity
    Python 1 GPL-3.0 3 1 0 Updated Apr 24, 2026
  • cids-evaluation Public

    Evaluation of log-based collaborative intrusion detection systems

    ait-aecid/cids-evaluation's past year of commit activity
    Python 0 GPL-3.0 0 0 0 Updated Feb 6, 2026

Top languages

Loading…

Most used topics

Loading…