ysrc/yulong-hids-archived

Health v2 · maintenance only

Flags: archived no_license

Adoption not part of the score

2184 stars · 580 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Yulong HIDS is an open-source host intrusion detection system composed of an Agent, Daemon, Server, and Web console that collects host information and monitors file, network, and command behavior to detect intrusions in real time. It supports custom detection rules, threat intelligence lookups, and rapid blocking of malicious processes and files.

Use cases

• detect intrusions on linux servers in real time
• monitor file changes and command execution on hosts
• alert on webshell writes and abnormal logins
• block malicious processes and files quickly
• write custom detection rules for host behavior
• centralize host security monitoring across many servers

When to choose

• you want a self-hosted open-source HIDS to study or fork
• you need real-time host behavior monitoring with custom rules
• you want to learn HIDS architecture for a security engineering project

When to avoid

• you need a maintained product with active support
• you lack in-house security analysis expertise to tune rules
• you need support for office or Docker environments rather than production servers

Facets

application · maturity abandoned

monitoring alerting security logging security monitoring windows cross-platform self-hosted hids intrusion-detection host-security agent-based threat-detection archived devops linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ysrc/yulong-hids-archived")