I am interested in getting involved with an open source project in my spare time.
I thought that it may be useful to contribute to an open source project that uses flow data to check for lateral movement inside of networks and also to check for known bads in remote connections.
This seems like really low hanging fruit from a defense scenario.
I’ve tried googling around for something like this and I have come up short.
Is anyone aware of any such projects?