eklavyamathur9

eklavyamathur9/DNSpector

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

1 stars 0 forks 1 watchers Python MIT License
View on GitHub
5 Open Issues Need Help Last updated: Aug 20, 2026

Open Issues Need Help

View All on GitHub
Live dashboard (Streamlit or Flask) for --live mode about 3 hours ago
enhancement good first issue
eklavyamathur9/DNSpector
1

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

Python
Typosquatting detection (Levenshtein distance against known-brand domains) about 3 hours ago
enhancement good first issue
eklavyamathur9/DNSpector
1

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

Python
Alert/syslog-forward de-duplication (cooldown per host+alert-type) about 3 hours ago
enhancement good first issue
eklavyamathur9/DNSpector
1

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

Python
Backport the sliding-window burst tracker to batch mode about 3 hours ago
enhancement good first issue
eklavyamathur9/DNSpector
1

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

Python
Wire up mypy in CI alongside ruff about 3 hours ago
help wanted good first issue
eklavyamathur9/DNSpector
1

Capture and analyze DNS traffic for anomalies such as DNS tunneling and DGA-generated domains - multi-signal detection, threat-intel enrichment, live monitoring, and SIEM export.

Python